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SECTION I 


INTRODUCTORY REMARKS 


Paragraph 


The essential drlference betv;een monoalphabetic and polyalphabet1c substitution __ ----- 
------------- 
1 


Pnmary classification of polyalphabetic systems _ ---------- ___ ---------- ------ _ ------- ------------ ----- ------------ 
2 


Pnmary classification of peuod1c systems ______ -------- ------------------------------------------- -------------------------- 
3 


Sequence of study of pohalphabet1c systems __ -------------------------------- -------------------------------------------- 
4 
1 The essential difference between monoalphabet1c and polyalphabet1c substitution -a 
In the substitution methods thus far discussed it has been pomted out that theIT baSic feature 


lS that of monoalphabehc1ty 
From the cryptanalytic standpomt, neither the nature of the 


cipher symbols, nor their method of product10n 1s nn essentrnl feature, although these may be 


d1fferentiatm~ charactenst1cs from the cryptographIC cttandpomt 
It is true that m those cases 


designated as monoalphnbetic subc;t1tution \\1th vanants or multiple eqmvalents, there is a 
departure, more or le c; cons1dera ble, from stn<'t monoalphabet1c1ty 
In some of those cases, 
mdeed, there may be fl'rnJlable two or more "holly mdependent sets of eqmvalents, \\ruch, 
moreover, may e\rcn be arranged m the form of completely separate alphabetci 
Thus, wlu.le a 
loose termmology might pernnt one to designate such syc;tems as polyalphabehc, it 1s better to 
reserve this nomencfoture for those cases wherem polyalphabehc1ty JS the essence of the method, 
specrfically mtroduced 'nth the purpose of impartmg a positional vanation m the substitutive 
eqmvalents for pl::nn-tc"t letters, m accordance with some rule directly or mdrrectly connected 
"'1th the absolute positions the plam-text letters occupy m the message 
This pomt calls for 


amphficat10n 


b In mono,1lph'lhrtic -.ubstitut1on "'1th 'arum ts the ob3ect of havmg different or multiple 


cqmvalents is to supprec;ct, so far as possible by srmple methods, the charactenst1c frequenCI<''l 
of the lettcrc; orcurnng- m plam teJi.t 
As hac; been noted, 1t is by means of these characteristic 
frequencies th'lt the cipher cqmvalents can usually be identified 
In these systems the varymg 


eqmvalents for plmn-te'\.t letters are su bJect to the free choice and caprice of the enmphermg 
clerk, 1f he ic; careful Pnd consc1ent10us m the work, he "ill really mnke use of all the different 
eqmvalents afforded by the c;ystem, but if he l" shp-shod and burned m his "ork, he "'tll use the 
same eqmv'llents repeatedly rather than take pams and time to refer to the charts, tables, or 
diagrams to find the varrnnts 
Moreover, and this is a crucial pomt, even if the md1vidual 


enc1phenng clerks are e"\.trePlely careful, when many of them employ the same system it is entirely 
rmposs1ble to msure a complete d1vers1ty m the enc1pherments produced by two or more clerks 
workIPg at different message centers 
The result is mev1tably to produce plenty of repetitions 


m the texts emanatmg from several stations, and when texts such as these are all available for 
study they are open to solution, by a compauson of their srmtlant1es and differencec; 
c In true polyalphabetic systems, on the other hand, there is estabhshed a rather defirute 
procedure which automatically determmes the shifts or changes m eqmvalents or m the manner 
m which they are mtroduced, so that these changes are beyond the momentary wlu.m or choice of 
the enc1phe11ng clerk 
When the method of shifting or changmg the eqmvalents lS scientifically 


sound and sufficiently complex, the research necessary to establish the values of the cipher 
characters 1c; much more prolonged and difficult than is the case even m complicated monoalpha- 
bet1c substitution with variants, as will later be seen 
These are the ob3ects of true polyalpha- 


betic subst1tut1on systems 
The number of such systems is qmte large, and it will be possible to 
(1) 


2 


describe m detail the cryptanalysis of only a. few of the more common or typical examples of 
methods encountered m practical mil1ta1y commumcatIC'ns 
d The three methods, (1) smgle-eqmvalent monoalphabet1c 1>11bo;btut10n, (2) monoalpha- 


behc sub'3t1tution with vanants, and (3) true polyalphebet1c substitution, o;h0w the follo"'mg 
relationships as regards the eqmvalmcy between plam-text and c1pher-te:xt umts 
A In method (1), there 1s a set of 26 symbols, a plmn-text letter 1s al"'ays rC'preo;ented by 
one and only one of these symbols, conversely, a symbol always represento; the same plam-te:xt 
letter 
The eqmvalence between the plam-te'\.t and the cipher letters 1s constant m both enci- 


pherment and decipherment 
B In method (2), there is a set of n symbols, "here n may be any number greater than 26 


and often is a. multiple of that number, a plam-te:xt letter may be represented by 1 2 3 
different 1>ymbols, conver-;cly, a symbol always represents the o;ame plam-text letter the' sa~e as 
is the case m method (1) 
The eqmvalence between the plam-te'!{t and the cipher letters is 


vanable m enc1pherment but constant m decipherment 1 


C In method (3) there is, as m the first method, a o;et of 26 symboh,, 11 plrm-te'!{t letter 
may be reriesented by 1, 2, 3, 
26 dille1ent symbols, comer-.ely, a symbol may repiesent 


1, 2, 3, 
26 drlierent plam te"\.t letters, dependm~ upon the system and the specific key 
The eqmvalence between the plam-text and the cipher letters 1s vanable m both enc1pherment 
and decwherment 
2 Pumary class11l.cat1on of polyalphabet1c systems -a A prima1y classificat10n of poly- 


alphabetic svstems mto two rather d1stmct types may be me.de (1) penodic systems and (2) 
aperiodic systems 
When the enciphenng proce"o; mvolves a cryptographic treatment \\hich is 
repetitive m character, and which results m the prod11ct10n of C'lfclic phenomnw m the crypto- 
graphic text, th<' "Y~tem 1s termed perwdic 
When the enc1phnmg p10cess 1-; not of the type 
descnbed Ht the foregomg genC'ral il'uno;, the W".!tem io; tC'rmC'd aperwdu 
The ".!nbstituhon rn 
both ca".!es mvolves the use of t'\\o 01 morl' ophe1 alphabet1> 


b The cychc phenomena mherent m a pl'r1odic system may be e'\.llib1tC'd externally m 
which casl' they are c;a1d to be patent, or they may not be exhibited eJ..ternJlly, and must be 'un- 
covered by a p1ehmmary step ill the analy•ns, ill which case they are said to be latent 
The 
penod1c1ty may be qmte defimte m nature, and therefore deternunable "'1th mathematical 
e'!{act1tude allowmg for no vanabtl1ty, m which case the penodic1ty 1s said to be.fixed 
In other 
mstances the penodmty is more or le1>s fieJ..1ble m character and even though it may be deter- 


1 There is a monoalphabctic method m "hich the mverse result obtams, the correspondence bemg constant 


in enc1pherme lt but vanable m decipherment, tins is a method not found m the usual books on cryptography 
but m an essay on that subJect by Edgar Allan Poe, entitled, m some editions of his works, A Jew words on secret 
wnhng and, m other editions, Cryptography 
The method is to draw up an enc1phermg alphabet such as the 


following (using Poe's example) 


Plain - -- -- A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
Cipher ___ - -- 
S U A V I T F R I N M 0 D 0 F 0 R T I T E R I N R E 
In such an alphabet, because of repetitions in the 01pher component, the plam-te"{t eqmvalcnts are subJect to a 
conmderable degree of vanab1llty, ai;: will be seen m the demphenng alphabet 


Cipher __ ----- 
A B C D E F G H I J K L M N 0 P Q R S T U V W X y Z 


{ 


C 
MGO 
E 
KJL 
HAFBD 


Plam___ ____ __ 
~ 
~ 
X ~ 
i 
~ 


w 
y 
Tlus type of variability gives nse to ambigmtie'! in dempherment 
A cipner group such as TIE. would yield 


such plain-te"{t sequences as REG, FIG, TEU, REU, etc , which could be read only by conte.et 
No system of such a 
character would be practical for serious usage 
For a further d1scuss1on of this type of cipher alphabet see 


Friedman, Wilham F, Edgar Allan Poe, Cryptographer, Signal Corps Bulletms Noll 97 and 98, 1937-38 


3 


mmable mathematic,elly, allowance must be made for a degree of vanabihty suhJect to llllllts 
controlled hy the specific system under mvest1gat10n 
The penodic1ty l'> m tlus case said to be 


fl,exible, or iariable 'IJJl,thin limits 


3 Primary class11l.cat1on of penod1c systems -a Penod1c polyalphabetic substitution 


systems may pnmanly be classmed mto two kmds 
(1) Those m which only a few of a whole set of cipher alphabets are used m enc1phermg 


mdividual messages, these alphabets bemg employed repeatedly ma fixed sequence throughout each 
message 
Because it is usual to employ a secret word, phrase, or number as a key to determine 


the number, identity, and sequence with which the mpher alphabets are employed, and this 
key is used over and over agam m enc1pherment, this method is often called the repeating-key 
system, or the repeating-alphabet system It is also sometimes referred to as the m'Ultiple-alpha- 
bet system because if the keymg of the entue message be considered as a whole it is composed 
of multiples of a short key used repet1t1vely 2 In this text the deS1gnation "repeatmg-key 
system" will be used 
(2) Those m which all the cipher alphabets compnsmg the complete set for the system are 
employed one after the other successively m the enc1pherment of a message, and when the 
last alphabet of the senes has been used, the encipherer begms over agam with the first alphabet 
This IS commonly ref erred to as a progressive-alphabet system because the cipher alphabets are 
used m progression 
4 Sequence of study of polyalphabet1c systems-a In the studies to be followed m con- 


nection with polyalphabet1c systems, the order m which the work will proceed conforms very 
closely to the classmcations made m paragraphs 2 and 3 
Penod1c polyalphabetlc substitution 
ciphers will come first, because they are, as a rule, the srmpler and because a thorough under- 
standmg of the pnnc1ples of theu analysis is prereqwsite to a comprehension of how apenod1c 
systems are solved But m the final analyBls the solution of e'!{amples of both types rests upon 
the conversion or reduction of polyalphabetimty mto monoalphabetlc1ty If tlus lS possible, 
solution can always be achieved, granted there are sufficient data m the final monoalphabet1c 
distnbut1ons to perm1t of solution by recourse to the ordmary pnnc1ples of frequency 
b First m the order of study of penod1c systems will come the analySIS of repeatmg-key 
systems 
Some of the more srmple vaneties will be discussed m detail, with examples 
Subse- 


quently, ciphers of the progressive type will be discussed 
There will then follow a more or less 


detailed treatment of apenod1c systems 


a French terminology calls tins the "double-key method", but there is no logic m such nomenclature 


SECTION II 


CIPHER ALPHABETS FOR POLYALPHABETIC SUBSTITUTION 


Paragraph 
Classification of cipher alphabets upon the basis of their deri' at10n 
_ 
5 


Primary components and secondarv alphabets _ 
_ __ __ __ __ ____ _ __ __ _ ~-~~~-~~ 
--~~~- 
-~-~~- -~~--~----~-~--~ 
6 


Primary components, cipher disks, and square tables _ _ -------- ----- ----------------- --------- ------------------ 
7 


o Classification of cipher alphabets upon the basis of their denvation -a The subst1tu- 
t1on processes m polyalphabet1c methods mvolve the use of a plurality of cipher alphabets 
The latter may be denved by vanous schemes, the exact nature of which determmes the pnnc1pal 
charactenst1cs of the cipher alphabets and plays a very important role m the preparation and 
solution of polyalphabet1c cryptograms For these reasons it is advisable, before proceedmg to a 
d1Scuss1on of the pnnc1ples and methods of analysis, to pomt out these various types of cipher 
alphabets, show how they are produced, and how the method of their product10n or der1vat10n 
may be made to yield important clues and short-cuts m analysis 
b A primary class1ficat10n of cipher alphabets for polyalphabet1c substitution may be made 


into the two followmg types 
(1) Independent or unrelated cipher alphabets 
(2) Denved or mterrelated cipher alphabets 
c Independent cipher alphabets may be disposed of m a very few words 
They are merely 
separate and distinct alphabeto; o;hov11ng no relationship to one another many V\<ay 
They may 


be compiled by the vauous methods discussed m Sect10n IX of Elementa1"1J M1btary Cryptography 
The solution of cryptogramc; wntten by means of such alpha bets is rendered more difficult h" 
reason of the absence of any relationship between the equivnlents of one cipher alphabet and 
those of any of the other alphabets of the same cryptogram 
On the other band, from the pomt of 


view of practicability m their product10n and then handling m cryptographmg and decryptograph- 
mg, they present some difficulties which make them less fav01ed by c1yptographers than cipher 
alphabets of the second type 
d Denved or mterrelated alphabets, as their name indicates, are most commonly produced 
by the interaction of two pnmary components, wluch when Juxtaposed at the various pomts of 
comcidence can be made to yield secondary alphabets 1 
6 Primary components and secondary alphabets -'l'\\o basw, '>hdable o;equences or com- 
ponents of n characters each will yield n secondary alphabets 
The components may be classi- 


fied accordmg to various schemes For cryptanalytw puiposes the followmg classification Wiil be 
found useful 


CASE A The pruna1y components are both no1mal sequencec; 
(1) The sequences proceed m the same direction 
(The secondary alphabets are direct 


standard alphabets) 
(Pars 13-15) 
{2) The sequences proceed m opposite directions 
(The secondary alphabets are reversed 
standard alphabets, they are also reciprocal cipher alphabets) 
(Par 13i, 14g) 


CASE B The pnmary components are not both normal sequences 
(1) The plam component is normal, the cipher component is a mixed sequence 
(The 
secondary alphabets are nu:i.ed alphabets) 
(Par 16-25) 


1 See Sec, VIII and IX, ~mentar11 Miliear11 Cryptography 


(4) 


5 


(2) The plam component is a muted sequence, the cipher component is normal 
(The 
secondary alphabets are nuxed alphabets ) 
(Par 26 ) 
(3) Both components are nuxed sequences 
(n) Components are identical nuxed sequences 
I Sequences proceed m the same direction 
(The secondary alphabets are 


mixed alphabets) 
(Par 28) 
II Sequences proceed m opposite directions 
(The sewnda.ry alphabetc; me 
reciprocal mn:ed alphabets ) 
(Par 38 ) 
(b) Components are different mu..ed sequences 
(The secondary alph..tbcts nre nuxed 
alpha bets ) 
(Par 39 ) 
7. Primary components, cipher disks, and square tables -a In precedmg texts it has 
been shown that the equivalents obtainable from the use of quadneular or square tables may be 
duplicated by tbe use of revolvmg cipher disks or of shdmg pnmary components 
It was also 
stated that there are vanous ways of employing such tables, disl\.s, and shdrng componentc; 
Cryptographically the results may be quite diverse from d1ffe1ent methods of usmg such para- 
phernalia, smce the specific eqmvalents obtamed from one method may be altogether different 
from those obtamed from another method 
But from the cryptanalytic pomt of view the 


diversity referred to is of hitle s1gmficance, only m one or two cases does the specific method of 
employing these cryptographic mstrumentaht1es have an lmportant beanng upon the procedure 
m cryptq,nalys1s 
However, it is advisable that the c;tudent learn somethm~ about these different 
methods before proceedmg with further work 
b There are, not i'l.llo, but four letters mvolved m every case of findmg equivalents bv means 
of shdmg pnmary components, furthermore, the determmation of an eqmvalent for a given 
plam-te-...t letter is representable by two cquat10ns mvolvmg four elements, usually letters 
Three of th<.'se letters are by this time well-knoV1n to and understood by th<' student, VI7, ek, Sp, 
and 8 0 
The fourth element or lett<.'r has beC'n passed over without much comment, but c1ypto- 


g1clphically 1t is 1ust as important a factor as the other three 
Itc; funct10n m.iy best be mdu ated 
by notmg what happens when two pnmary components are Juxtaposed, fo1 the purpose of findmg 


eqmvalent~ Suppose these components are the followmg sequences 


(1) A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


~) F B P Y R C Q Z I G S E H T D J U M K V A L W N 0 X 


Now suppose one is merely asked to find the eqmvalent of PP when the key letter is K 
Without 


furthe1 !>pec1ficat1on, the mph er eqmvalent cannot be stated, fo1 it 1s necessary to know not only 
which K will be uc;ed as the l;ey letter, the one m the component labeled (1) 01 the one m the 
component labeled (2), but also what letter the Kk will be set ngnm£>t, m order to JUi..ta.pose the 
two components 
Most of the time, m precedmg texts, these two factors have been tacitly 


assumed to be fixed and well understood the Kk is sought m the mixed, or cipher component, 
and this K is set agamst A m the normal, or plam component 
Thus 


Plam 
Index 


i 
i 


(1) Plain____ __ ABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZ 
(2) Cipher_______ 
FBPYRCQZIGSEHTDJUMKVALWNOX 
i 
i 
Cipher 
Key 
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c The letter A m tlus case may be termed the index letter, symbolized A1 
The mdex letter 


constitutes the fourth element mvolved m the two equat10ns applicable to the findmg of eqmva- 
lents by shdmg components 
The four elements are therefore these 


(1) The key letter, ek 
(2) The mdex letter, 8 1 
(3) The plam-text letter, ell 
(4) The cipher letter, 8 0 


The mdex letter is commonly the imtial letter of the component, but this, too, is only a con- 
vent10n 
It might be any letter of the sequence constitutmg the component, as agreed upon by 
the correspondents 
However, in the subsequent discussion it will be assumed that the index letter 


is the initial letter of the component in which it is located, unless otherwise stated 
d In the foregomg case the enc1phermg equat10ns are as follows 


(I) Kk=A1, Pll=Z0 


But there 1q notlung about the use of shdmg components "\\h1ch excludes other methods of findmg 
eqmvalents than that shown above 
For mstance, despite the labeling of the two components 
as shown ahove, there is nothmg to prevent one from seekmg the plam-text letter m the com- 
ponent labf'lecl (2), that IS, the cipher component, and takmg as its cipher eqmvalent the letter 
opposite it m the other component labeled (1) 
Thus 


Cipher 
Index 


i 
t 


(1) ABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZ 
(2) 
FBPYRCQZIGSEHTDJUMKVALWNOX 


Thus 


t 
t 
Plam 
Kev 


(II) Kk=A 1, Pp=K. 


c Srncf' f'quat10n<> (I) and (II) 31eld different resultants, even with the "\ame mde).,., key, 
and plum-text letters, it IC\ obv10Ps that an accurate formula to cover a specific pair of enc1phermg 
equat10ns must mclPde data showmg m what component each of the four letters compnsmg the 
equat10ns is located 
Thus, equat10ns (I) and (II) should read 
(I) Kk m component (2)=A1 m component (1), PP m component (l)=Zc m component (2) 
(II) Kk m component (2) =A1 m component (1), PP m component (2) = K. m component (1) 
For the sake of brevity, the followmg notat10n "ill be used 


(1) Kk12=Al/11 Pp11=Zc12 


(2) Kk12=A111, Pp12=Kc11 


f Employmg t'' o shdmg components and the four letters entenng mto an enc1phenng 
equat10n, there are, m all, twelve dl.ff erent resultants possible for the same set of components 
and the same set of four basic elements 
These twelve differences m resultants anse from a set 
of twelve d1ffeient enc1phermg cond1t10ns, as set forth below (the notation adopted m sub- 
paragraph e is used) 


(1) 8k12=8111 1 8p11=8c/2 
(2) 8k12=8w 1 8p12=80 11 
(3) 8k11=8112, 8p/1=8c/2 
(4) 8k11=8112, 8p12=8c/l 
(5) 8k12=8p/1 1 81/1=8c12 
(6) 8k12=80/li 8111=81112 


(7) 8k12=8p/l1 8112=8.11 
(8) 8k12=8c/l1 8112=81111 
(9) ek11=8p12, 8111=8.12 
(10) 8k11=8c121 8111=8p/2 
(11) 8k11=8p12; 8112=8.11 
(12) ek11=8.12, 8112=8Pll 


7 


g The twelve resultantr:, obtamable from 1uxtaposmg <>hdmg components as md1eated under 
the prerNlmg "\Poparagraph may also be obtamed either from one square table, m -wlnch case 
twelve d1fterent niethouc; of finclmg equivalents must be applied, or from twelve d1fI01cnt square 
tables, m -which case one standard method of findmg eqmvalents will serve all purposes 
h If but one table such as that shown below as Table 1-A is employed, the various methods 
of findmg eqmv,1lents are (hfficult to keep m mmd 


TABLE I-A 


A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
F B p I y R c Q z I G -~J~ H T D J u M K v ~_I:_ !I_ _!_l-2_ x 
BPYRCQZIGSEHTDJUMKVA_I:_!l_~OXF 
PYRCQZIGSEHTDJUMKVAL!l__!__Q_XFB 
YRCQZIGSEHTDJUMKVALW_!__Q_~FBP 
RCQZIGSEHTDJUMKVALWN_Q_~~BPY 
CQZIGSEHTDJUMKVALWNO~~~PYR 
QZIGSEHTDJUMKVALWNOX~~~YRC 
ZIGSEHTDJUMKVALWNOXF~~~RCQ 
IGSEHTDJUMKVALWNOXFB~~~CQZ 
GSEHTDJUMKVALWNOXFBP~~~QZI 
~EHTDJUMKVALWNOXFBPY~~~ZIG 
~HTDJUMKVALWNOXFBPYR~~~IGS 
HTDJUMKVALWNOXFBPYRC~~~GSE 
TDJUMKVALWNOXFBPYRCQ~~~SEH 
DJUMKVALWNOXFBPYRCQZ~~~EHT 
JUMKVALWNOXFBPYRCQZI~~~HTD 
UMKVALWNOXFBPYRCQZIG~~~TDJ 
MKVALWNOX~BPYRCQZIGS~~~DJU 
KVALWNOXFBPYRCQZIGSE~~~JUM 
VALWNOXFBPYRCQZIGSEH~~~UMK 
ALWNOXFBPYRCQZIGSEHT~~~MKV 
LWNOXFBPYRCQZIGSEHTD~~~KVA 
WNOXFBPYRCQZIGSEHTDJ~~~VAL 
NOXFBPYRCQZIGSEHTDJU~~~ALW 
OXFBPYRCQZIGSEHTDJUM~~~LWN 
XFBPYRCQZIGSEHTDJUMKVALWNO 


For example 
(1) For enmphenng equat10ns 8k12=8111, 8p11=8.12 


Locate 81> m top sequence, locate ek m first column, 
8 0 is letter w1tlun the sqnare at mtersect10n of the t-wo hnes thus determmed 
Thus, 


8 


(2) For enciphermg equat10ns 8it12=81/1, 81>12=8011 


Locate 811: In first column, follow hne to right to Sp, proceed up this column 9 
0 18 
letter at top 
' 
Thus 


K11:12=A111, P 1>12=Kc11 


(3) Fo1 enc1phermg equat10n-; 8k11 =8112 , 8vn=80,2 


Locate ek m top <Jequence and proceed down column to r. 
L 
,_,1, 
ocatP E\, m top sequence, 8 0 is lPtter at other corner of rcctmidc thus formed 


Thus 


Kk11=A112, Pv11=Xc12 


Only three cl1fferent methods have been shown and the student no doubt already has encountered 
difficulty m keeprng them segregated m his mmd 
It >Vould obv10usly be very confusmg to try 
to remember all twelve methods 
But if one standard or fixed method of findmg eqmvalents is 
follo'' ed >Vith several different tables, then this difficulty disappears 
Suppose that the followmg 
method is adopted Arrange the square so that the plam-text letter may be sought ma separat~ 
sequence, mnrnged alphabetically, above the squnre and so thnt the key lette~ mny be sought 
ma separate sequence, also arranged alphabetically, to the left of the square, look for the plam- 
text letter m the top row, locate the key letter m the 1st column to the left, find the letter stand- 
mg >Vithin the square at the mtersect10n of the vertical and horizontal Imes thus determmed 
Then tnelve squares, eqmvalent to the t\velve different cond1t10ns listed m subparagraph j can 
readily be constructed 
They are all shown m Appendn 1, pp 96-107 
' 


i 
·wlwn these sqt.are tables are exammed C'Lrefullv, certam mtcrcstmg pomts aic noted 
In the fast place, the ta hks may be paired <JO th'lt one of a pmr n ay sPrve foi enmphermg and the 
other of the pan may <JPrvc for dcciphermg, 01 nee vPr<Ja 
For e'\:amrle, tables I and IJ hear tlu-, 


r~c1procal relat10nslnp to each other, III and IV, V and VI, VJI and VIII, IX and X, XI and 
XII In the <Jecond place, the rntcrnal chspo<J1t10ns of the leltn<J, although the tables are derived 
from the same pair of component<;;, are qmte <l1Yerse 
For e>:amplc, m table I-B the horizontal 


sequences are identical, but arc merely displaced to the right and to the left different mtervals 
accordmg to the successive key letters 
Hence tlus square show<J >Vhat may be termed a hor- 
1zontally-d1splaced, dirert symmetry of the cipher component Vertically it sho" s no symmetrv 
or if there IS symmetry, it IS not VlSible 2 nut \v hen T'Lhle I-B IS more 'carefullv e>:ammed ~~ 
mv1sible, or mdirect, vertical symmetry may he discerned where at fir<Jt glance 1t i~ not appar~nt 
If one tak<''l nny two co1'umns of the table, it is found that the mteryal between the members of 
any pair of letter.., rn one column is the same as the mterval behveen the members of the homolo- 
gous pair of letters In the other column, if the distance is measured on the cipher component 
For 
example, conside1 the 2d and 15th columns (headed by Land I, respectively), take the letters p 
and Gm the 2d column, and J and Wm the 15th column The distance between P and G on the 
cipher component is 7 mtervals, the distance between J and W on the same component is also 
7 mtervals 
This phenomenon implies a krnd of hidden, or latent, or mduect symmetry w1thm 
the cipher square 
In fact, it may be stated that every table which sets forth m systematic fash10n 


the various <Jecondary alphabetq denvaole by shdrng two primary sequences through all pomts of 
comcidence to find cipher eqmvalents mn<Jt show some kmd of <Jymmetry, both horizontally and 


2 It is true that the first column v.1thm the table ~hov.s the plam-component sequence, but this 18 merelv 
because the method of findmg the eq1uvalents m this case 1s such that this sequence is bound to appear m that 
column, smce the successive key letters are A• B • C • 
Z • and tlus sequence happens to be identical with 


~:bf~; 
1;;~1;:X~ent m this case 
The same !s true of Tables V and XI, it is also applicable to the first row of 
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vertically 
The symmetry may be termed vi:,,ible or direct, if the sequences of letteis m the 10ws 


(or columns) aie the same throughout and are identical with that of one of the pnmary com- 
ponents, it may be termed hidden or indirect if the sequences of letters m the rows or coh,mns 
are difterent, apparently not related to either of the components, but are m reality decimat10ns 
of one of the pnmmy components 
J When the twelve tables of Appendix 1 are exammed m the light of the foregomg remarks, 
the type of symmetry found m each may be summarized m the followmg manner 


1able 


Horizontal 


V1s1ble or direct 


Follow; 


plam 


component 


Follows 
cipher 
component 


Inv101ble or induect 


J<ol!ows 


pl am 
component 


Foilows 
cipher 


component 


Follows 


plam 


component 


Vertical 


lnv1s1ble or indirect 


Follows 
cipher 


component 


Follow; 
phm 


component 


Follows 
cipher 
cou1ponent 


!_ __________________ --------- 
x 
--------- --------- --------- --------- --------- 
x 


!! __________________ --------- --------- 
x 
--------- --------- --------- 
x 
--------- 
!IL________________ __ _ _ _ __ _ _ 
x 
_ _ _ _ _ _ _ _ _ __ ___ _ _ _ _ __ _ __ __ _ _ 
x 
__ - __ - _____ ---- __ _ 
IV - __ -- ________ --- _____________ --- __ _ 
x 
__ _ _ ___ __ 
x 
------ - -- -- -- - -- - - -- -- _ -- __ 


y __________________ --------- 
x 
--------- --------- --------- --------- --------- 
x 
VJ_________________ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 
x 
____________________ -- __ - _ _ 
x 
__ - __ - __ _ 


VII________________ 
x 
___________________________ --------- --------- 
x 
--------- 
VIII_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 
x 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ __ - _ - - _ - __ - __ - - _ _ 
x 
__ - __ - __ _ 
rx___ _ _ _ _ _ _ _ _ __ ____ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ ___ _ _ _ _ _ _ _ _ _ 
::1. 
_ _ ____ ___ _ _ _ _ ___ __ _ _______ _ 
x 
x_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 
x 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 
x 
XL____ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 
x 
_ _ _ _ _ _ _ _ _ 
x 
___________ - __ - _____ - _____ _ 
XII________________ _ _ _ _ _ _ _ _ _ 
x 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 
x 
__ - __ - __ - __ - __ - __ _ 


Of these twelve types of mpher squares, correspondmg to the twelve different ways of usmg a 
pair of shdmg pnmary components to derive secondary alphabets, the ones best known and 
most often encountered m cryptograplnc studies are Tables I-B and II, referred to as bemg of 
the Vlgenere type, Tables V and VI, referred to as bemg of the Beaufort type, and Tables IX 
and X, referred to as bemg of the Delastelle type 
It will be noted that the tables of the Dela- 
stelle type show no direct or vIS1ble symmetry, either horizontally or vertically and because of 
tlus are supposed to yield more security than do any of the other types of tables 
But it will 


presently be shown that the supposed mcrease m security is more illusory than real 
k 1 he foregomg facts concernmg the various types of quadricular tables generated by d1ve1se 
methods of usmg shdmg prnnary components or their eqmvalent rotatrng cipher disks will be 
employe<l to good advantage, when the studies presently to be undertaken Mll brmg the student 
to the place where he can comprehend them m the analysis of polyalphabet1c systems 
But m 
order not to confuse him with a multiplicity of details which have no direct bearmg upon basic 
principles, one and only one standard method of fmdmg eqmvalents by means of shdrng compo- 
nents will be selected from among the twelve available, as set forth m the precedmg subpaia- 
graphs 
Unless otherwise stated, this method will be the one denoted by the first of the formulae 
hsted m subpar f, viz 


~12=81/1, 8v11=8c12 


Calling the plam component "1" and the cipher component "2", this will mean that the keyletter 
on the cipher component will be set opposite the mdex, which will be the first letter of the plam 
component, the plam-text letter to be enciphered will then be sought on the plam component and 
its eqmvalent will be the letter opposite it on the cipher component 


SECTION III 


THEORY OF SOLUTION OF REPEATING-KEY SYSTEMS 


Paragraph 
The three steps m the analysis of repeatmg-key systems 
__ __ _ ___ __ 
_ _ ------------------------------- ______ 
8 


First skp findmg the length of the penod__ ________ _____ 
_ ___________ ------------- ____ -------------------- __ _ 
9 
General remarks on factonng ____ ------------------------------------ ---------- ------------ 
______________ --------------- ___ 
10 


Second step d1stnbutmg the cipher text mto the component monoalphabets_ _ ______ ------------------- ______ 
11 


Third step solvmg the monoalphabetic distnbut10ns----------------------------------- ------------------ ---------------- 
12 


8 The three steps m the analysis of repeating-key systems -a The method of enc1phermg 
accordmg to the pnnc1ple of the repeatmg key, or repeatmg alphabets is adequately explamed m 
Section XI of Elementary Mihtary Cryptography, and no further reference need be made at this 
time 
The analysis of a cryptogram of thrn type, regardless of the kmd of cipher alphabets 
employed, or their method of product10n, resolves itself mto three d1stmct and successive steps 
(1) Determmat10n of the length of the repeatmg key, whwh is the same as the determmat10n 


of the exact number of alphabets mvolved m the cryptogram, 
(2) Allocat10n or distribut10n of the letters of the cipher text mto the respective cipher alpha- 
bets to which they belong 
This is the step which reduces the polyalphabetic text to mono- 


alphabetic terms, 
(3) Analysis of the md1VIdual monoalphabetic d1stribut10ns to determme plam-text values of 
the cipher letters m each distribut10n or alphabet 
b The foregomg steps will be treated IU the order m wluch rnent10ned 
The first step may 
be described briefly as that of determining the period 
The second step may be described briefly 


as that of reduction to monoalphabetic terms 
The third step may be designated as identifi,cation of 


cipher-text values 
9 First step. finding the length of the period -a The determmat10n of the period, that 


is, the length of the key or the number of cipher alphabets mvolved m a cryptogram enciphered 
by the repeatmg-key method is, as a rule, a relatively simple matter 
The cryptogram itself 


usually mamfests externally certam phenomena which are the direct result of the use of a repeat- 
mg key 
The prmc1ples mvolved are, however, so fundamental m cryptanalysis that their 


eluc1dat10n warrants a somewhat detailed treatment 
This will be done m connection with a 
short example of enc1pherment, shown m Fig 1 


MESSAGE 


THE ARTILLERY BATTALION MARCHING IN THE REAR OF THE ADVANCE GUARD KEEPS 


ITS COMBAT TRAIN WITH IT INSOFAR AS PRACTICABLE 


(10) 


.... 
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[Key BLUE, usmg direct standard alphabets] 


CIPHER ALPHABETS 


A B c D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
Plam________________ 
S T U V W X y Z A 


\ 


(l) _________ B c D E F G H I J K L M XN yo zp AQ RB c D E F G H I J K 


C h 
(2) 
L M N 0 P Q R S T U V W 
ip er 
--------- 
F G H I J K L M N 0 p Q R S T 
(3) 
U V W X Y Z A B C D E 
--------- 
Q R S T U V W X Y Z A B C D 
(4) _________ E F G H I J K L M N 0 p 
B L U E 
B L U E 
B L U E 
B L U E 
ARDK 
THEA 
ARDK 
THEA 
USYE 
BCXO 


RT IL 
E E P S 


LERY 
I T S C 


B A T T 
0 MB A 


AL I 0 
TT RA 


NM AR 
I N W I 


C H I N 
T H I T 


G I N T 
I N S 0 


HERE 
FAR A 


A R 0 F 
S P R A 


T H E A 
C T I C 


DVAN 
ABLE 


CE GU 


a 
a 


R T I L 
S E C P 
LE RY 
M P L C 
BATT 
C L N X 
A L I 0 
B W C S 


NM AR 
0 x u v 
C H I N 
DSC R 
G I N T 
HTHX 
HERE 
I P L I 


A R 0 F 
B C I J 
THE A 
U S Y E 


D VAN 
E GU R 
C E G U 
D P A Y 
b 


E E P S 
F P J W 
I T S C 
J E M G 


0 MB A 
PX VE 
TT RA 
U E L E 
I N W I 
J y Q M 
T H I T 
u s c x 
I N S 0 
J Y M S 
FAR A 
G L L E 


S P R A 
TALE 
C T I C 
D E C G 
ABLE 
B M F I 


b 


CRYPTOGRAM 


U S Y E S E C P M P LC CL N X B W C S 0 X U V D SC RH T 


H XI PL I B C I J 
U S Y E E GU RD P A Y B C X 0 F P J W 


J EM GP XV EU E L E J Y Q MUS C X J Y M S G LL ET A 


L E D E C GB MF I 


FIGURK 1 
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b Regardless of what system is used, identical plam-text letters enciphered by the same 


opher J,lphabet 1 must yield Hlent1cal cipher letters 
Referrmg to Fig 1, such a cond1t10n i::. 


lnought about every time that identical plam-text letters happen to be enciphered \V1th the same 
key-letter, or every time identirnl plum-text letters fall mto the same column m the enc1pher- 
rnent 2 
Now snH'e the number of columns or pos1t10ns with respect to the key is ve1y hrmted 


(except m the case of very long key words), and smce the repet1t10n of letters is an mev1table 
con<l1t10n m plam text, it follows that there \Vlll be ma message of fair length many cases where 
identical plum-text letters must fall mto the same column 
They \Vlll thm, be enciphered by the 
same c1phei alphabet, resultmg, therefore, m ti L p1oduct10n of many identical letters m the 
mpher te.xt and these \VIll represent identical letters m the plam text 
·when identical plam-te.xt 


polygraphs faJl mto identical columns the result is the format10n of identical cipher-text poly- 
graphs, that IS, repet1t10ns of groups of 2, 3, 4, 
letters are e.xl11b1ted m the cryptogram 


Repetitions of this type will hereafter be called causal repetitions, because they are produced by 
a defimte, trnceable cause, viz, the enc1pherment of identical letters by the same cipher alphabets 
c It will also happen, however, that different plam-te:xt letters fallmg m different columns 
will, by m<'re accident, produce identical cipher letters 
Note, for example, m Fig 1 that m 


Column 1, RP liecomes Sc and that m Column 2, Hv also becomes Sc 
The product10n of an identical 


cipher text letter m these two cases (that IS, a repet1t10n where the plam-text letters are different 
and enmphercd by drfferent alphabets) is merely fortmtous 
It is, m every day language, "a 


mere comc1dence", or "an accident" Fo1 tlns reason repet1t10ns of this type will hereafter be 
called accidental repetitions 


d A consideritt10n of the phenomenon pomted out m c makes it obvious that m polyalpha- 
bet1L cipher::. it is important that the cryptanalyst be able to tell whether the repetitions he finds 
m a specific case are causal or accidental m therr ongm, that is, whether they represent actual 
enc1pherments of identical pbm-text letters by identical keymg elements, or mere comci<lences 
brought about purely fortmtously 
e Now accidental repetit10ns will, of course, happen fairly frequently with md1v1dual letters, 
but less freqm'ntly with digraphs, bemuse m tlns CJ,Se the same kmd of an "accident" must take 
place twice m success10n 
Intmt1vely one feels that the chances that such a purely fortmtous 
comc1dence \Hll happen two times m success10n must be mmh less than that it will happen eve1y 
once m a wlnle m the case of smgle letters 
Similarly, mtmt10n makes one feel that the chances 
of such accidents happenmg m the case of three or more consecutive letters are still less than m 
the case of digraphs, decreasmg very rapidly as the repetition mcreases m length 
j The phenomena of cryptographw iepetit10n may, fortunately, be dealt with stat1stw'1lly, 
thus takmg the matter outside the realm of mtmtion and puttmg it on a firm mathematical or 
ob]ect1ve b,ts1s 
Moreover, often the stat1st1cal analysIS will tell the cryptanalyst when he has 


arrane,ed 01 irarranged lns te:xt properly, that is, when he is approachmg or has reached mono- 
alphabet1c1ty m his efforts to reduce polyalphabetic text to its srmplest terms 
However, m 
order to preserve contmmty of thought it is deemed madv1sable to m1ect these statistical con- 
siderations at this place m the text proper, they have been mcorporated m Appendix 2 hereof 
The student is advised to study the Appendix very carefully after he has fimshed readmg this 
section of the text 


g At tlns pomt it will merely be md1cated that if a cryptanalyst were to have at hand only 
the cryptogrum of Fig 1, with the repetitions underlmed as below, a statISt1cal study of the 


1 It is to be understood, of course, that cipher alphabets with smgle eqmvalcnts are meant m tins case 


2 The frequency with which this cond1t10n may be expected to occur can be defimtely calculated 
A d1s- 


cuss10n of tins pomt falls beyond the swpe of the present text 
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number and lPngth of the repetitions w1tlnn the message (Par 5 of Appendix 2) would tell him 
that \Vhile some of the d1gLtphic r<'pet1t10m, m.1y be accwental, tho chances that tlH"Y all are 
accidental am small 
In the case of the tetrngraplnc repetition he would ieahze that the 
chances of its bC'mg ucc1drntal are vNy sm.Jll mdced 


A 
U S Y E S 
E C P M .E____1 C C L N 
X B W C S 
0 X U V D 
B 
S C R H T 
H X I P L 
I B C I J 
US YEE 
GU RD P 


c 
A YB C X 
0 F P J w 
J E M G P 
XV EU E 
LE J Y Q 
D 
M U S C X 
J_.Y M S G 
L L E T A 
L E D ~_Q 
G B M F I 


h A consideration of the facts therefo1p le.1d::. to but one rnndusion, viz, that the repet1t10ns 


exh1b1ted by the cryptogram under mvest1g1tion are not acciJental but are causal m their ongm, 
and the cause is m this case not d1ffir ult to find repct1tions rn the plum text were actually en- 
ciphered by identIC al alph•1 bets In order for tlns to Of cur, it was necessary that the tetragraph 
USYE, for C"\.ample, fall both hnies m eractly the S'1me rebtn e position with respect to the key 
Note, for e\.ample, th.it UYSE m F1~ 1 n·rncbcuts m both cases the plam-te.xt polygraph THEA 
The first time it occurred it fell m pos1i10ns 1-2-3-4 with respect to the key, the second time it 
oct urred it happened to fall m the very same reL1tive positions, although it might 1ust as well 
have happened to fall m any of the other three po..,-,1ble 1elative pos1t10ns with respect to the 
key, mz, 2-3-4-1, 3-4-1-2, or 4-1-~ 3 


i Lest the student be 1usled, hov. evC'r, a few more words are necessary on tlus sub1ect 
In the precedmg subparagraph the word "happened" was Ubed, this word correctly expresses 
the idea m mmd, because' the mseriion or delet10n of a smgle plam-tcxt letter betwC'en the two 
occurrences \Vould have thro\\ n the second o<..t urrence one letter forward or backward, respec- 
tively, and thus caused the polygraph to Le enciphered by a sequence of hlphabets such as can 
no longer produce the uphcr polygraph USYE from the plam-text polygraph THEA 
On the 
other hand, the msertion or delet10n of tln::. orie lrtier nught bnng the letters of some other 
polygraph mto similar columns so that some other repetit10n would be exh1b1ted m case the 
USYE repetrnon had thus been supp1essecl 
J The encipherment of s1m1lar letters by sumlar cipher alphabets is therefore the cause of 


the production of icpet1tions m the cipher text m the case of repeatmg-key ciphers 
What 
prmc1ples can be denved from tlus fact, and how can they be employed m the solution of crypto. 
grams of tlus type? 
k If a count is made of the number of lettms from and mcludmg the first USYE to, but not 
mcludmg, the second occurrence of U::3Yt~, a ioL1l of 40 ktters i::, found to mtervene between the 
two occurrences 
This number, 40, must, of course, be an m,act mt.1t1ple of the length of the key 
Havmg the plam-text before one, it is easily seen that it ls the 10th mnlt11)le, that is, the 4-letter 
key has repeated itself 10 times between the fin,t and the second occurrence of USYE 
It follows, 
therefore, that if the length of the key v.e,e not h.nown, the number 40 could safely be taken to 
be an exact multiple of the length of the key, m other ·words, one of the fuctors of the number 
40 would be equal to the length of the 1-..cy 
The word "safely" ls used m the precedmg sentence 
to mean that the mterval 40 applies to a rq,et1i10n of 4 letters and it has been shown that the 
chances that this repet1t10n is accidental are smnJl 
The factors of 40 are 2, 4, .5, 8, 10, and 20 
So far as tlus smgle repet1t10n of USYE is concernf'd, if the length of the key "'ere not known, all 
that could be said about the latter would be that it is equal to one of these factors 
The repet1- 


t10n by itself gives no further md1cations 
How can the exact factor be selected from among a 


list of several possible factors? 
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l Let the mtervals between all the iepet1tions m the cryptogram be listed 


follows 
They are as 


Hrpetit10n 
In ten al 
Fdctors 
--- - 
- 
1----------I 


1st USYE to 2d USYE_ _ _ _ _ _ _____ 
_ __ _ 
___ 
_ 
___ _ 
ht BC to 2d BC___ _ _ _ ___ _____ 
_ ___ ---------- 
_ _ _ 
_ 


1st ex to 2d ex___ - 
- ---- --- - - - 
- - ------ -- 
- - - - 


1st EC to 2d EC _ _ 
_ 
_ 
_ 
_ 


1st LE to 2d LE _ _ 
_ ______ _ _______ _ 


2d LE to 3d LE_ __ _ ___ _ 
_ ______ _ ______ 
_____ 
_ 
_ __ 


1st LE to 3d LE 
___ 
_ __ 
_____ _ _ 
___ _ ___ _ __ 


1st Jy to 2d JY 
___ _ _ __ _ 
______ ___ _ 
_ _ _______ _ 


1st PL to 2d PL _ _ 
___ _ 
_ ______ _ _ _ _ __ 
_ ___ _ 


1st SC to 2d SC_ 
__ _ __ _ 


(1st SY to 2d SY, already mclucled m-USYE )- 
- 


(1st US to 2d US, alrcad} mcludcrl m USYE) 
2d US to 3d uS _ 
_ _ __ 
_ _ _ _ _ _ 


(1st uS to 3d US, already mduded m USYE ) 
(1st YE to 2d YE, already mcluded m USYE ) 


40 
16 
25 
88 
16 
4 


20 


8 
24 
52 


36 


2, 4, 5, 8, 10, 20 
2, 4, 8 
5 
2, 4, 11, 22, 44 
2, 4, 8 
2, 4 
2, 4, 5, 10 
2, 4 
2 3, 4, 6, 8 10, 12 
2, 4, ld, 2u 


2, 3, 4, 6, 9, 18 


m Arc all these repet1t10ns causal 1epet1t10ns 7 It can be sho>Vn (Appen<li1' 2, par 1c) that 
the odds agamst a theory that the UYSE iepctitron is a, udcntal are about 09 to 1 (smce the 
probability for its occmrence is 01) 
It rnn also be '->hov.n that the odd<> ,1,.,.amst a theory that the 


10 digraphs winch occur two or more timPs are acc1dpntal repet1t10ns ,1i; over 4 to 1 (Appendix 
2, par 5c), the odds agamst a theory tliat tl1e two digraphs wlnch occur 3 times are accidental 
repetitions are qmte large 
(Probability is calculated to be about 06) The chances are very 
great, therefo1e, that all or nearly all tLebe repct1t10ns are causal 
('ertamly the chances a<Yamst 


the two occurrences of the tetragmph UYSE and the three occmrencesof the two different drcr~aph~ 
(LE and US) bemg acndental are qmte high, and it is thcrefo1e not astomshlng that the mterval: 
between all the various repetitions, e1'cept m one case, rontmn the factors 2 and 4 
n This means that rf the cipher rs written out m mther 2 columns or 4 columns all these 


repetit10n-; (e1'ccpt the ex repetit10n) would fall mto the same columns 
From tlus 


1 
1t follows 


that the length of the key rs either 2 or 4, the latter, on practical grounds, bemg more probable 
than the former 
Doubts concernmg the matter of choosmg between a 2-letter and a 4-letter 
key will be dissolved v.hen the cipher tei..t is drstnhutcd mto rts component umhteral frequency 
d1stnbut10ns 
o The repeated digraph ex m the foregomg message is an accidental repet1t10n, as wtll be 


apparnnt by rcferrmg to Frg 1 
Had the message been longer there v. ould have been more 
such acc1drntal rPpet1t10ns, bu.t, on the other hand, there would be a proportwnately greater 
number of causal repetitwns 
This is because the phenomPnon of repet1t10n m plam text is 


so all-p01 v admg 


P Sometimes rt happens that the cryptanalyst quickly notes a repet1t10n of a polygraph of 
four or morn letters, the mterval bet" een the first and second occurrences of which has only 
two factm-;, of wluch one is a relatively small n1,1mbn, the other a relatively high mcommen- 
surable number 
He may therefore assume at once that the length of the key rs equal to the 


smalln factor v.rthout searchmg for additional recurrences upon wluch to corroborate his 
assumption 
Suppose, for example, that m a relatively <>hort cryptogram the mterval between 
the first and second occurrences of a polygraph of five letters happens to be a number such as 
203, the factors of which are 7 and 29 
Evidently thf' number of alphabets may at once be 
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assumed to be 7, unless one is dealmg with messages e11:changed among correspondents known 
to use long keys In the latter case one could assume the number of alphabets to be 29 


q The foregomg method of detenmmng the period m a polyalphabet10 cipher is commonly 
referred to the literature as "factonng tho mt<'r v als between repetitions", or more often rt is 
simply called "factoung " Because the latter lb an apt term and is bnef, rt will be employed 
hereafter m tlus text to designate the process 


10 General remarks on factormg -a The statement made m Par 2 with respect to the 


cyclic phenomena said to be exlubrted m cryptograms of the pe11od1c type now becomes clear 
The use of a sho1 t repeatmg key produces a penod1c1ty of recurrences or repet1t1ons collectively 
termed "cyclic phenomena", an analysis of "dnch leads to a deterlllinat10n of the length of the 
per10d or cycle, and this gives the length of the key 
Only m the case of relatively short crypto- 
grams enciphered by a relatrvPly long key docs ft10to11ng fail to lead to the correct determmation 
of the number of cipher alphabets m a r<'peatmg-key cipher, and of course, the fact that a crypto- 
gram contam<> repetitions whose factors show constancy is m itself an mchcation and test of rts 
periodic nature 
It also follows that if the cr:yptogram is not a repeatmg-key cipher, then 
factormg will show no dehmte results, and conversely the fact that rt does not y10ld defimte 
results at once mdrcates that the cr)ptogram rs not a periodic, repeatmg-key cipher 


b There are two cases m wlnch factormg leads to no defimte results 
One ism the case of 
monoalphabet1c subst1tut10n mphers 
Hore recurrences are very plentiful as a rule, and the 
mtervals separatmg these recurrences may be factored, but the factors will show no constancy, 
there will be several factors common to many or most of the recurrences 
This m itself is an 


md1cat10n of a monoa1plrnbetrc su.bst1tut10n cipher, if ti1e "cry fact of the presence of many 
recurrences fails to impress itself upon the mexpenenced cryptanalyst 
The other case m wlnch 


the process of factormg is nons1gmficant mvolves certam types of nonpenod1c, polyalphabetic 
ciphers 
In certam of these ciphers recmrences of dri;raphs, tngraphs, and even polygraphs 
may be plentiful m a long IPessage, but the mtervals between such recurrences bear no defrmte 
multiple relation to the length of the key, -;urh as m the case of the true per10d1c, repeatmg-key 
cipher, m which the alphabets change with successive letters and repeat themselves over and 
over agam 
c Factormg rs not the only method of determmmg the length of the per10d of a perrod1c, 
polyalphabetrc subst1tut10n mpher, although rt is by far the most common and easily applied 
At this pomt it will merely be stated that when the message under study rs relatively short m 
comparison with the length of the key, so that there are only a few cycles of cipher text and no 
long repet1t10ns affordmg a basis for factormg, there are several other methods available 
However, it bemg deemed madv1sable to mtel)ect the data concernmg those other methods 
at this pomt, they will be explamed subsequently 
It rs desirable at tlns 1uncture merely to 
md1cate that methods other than fartormg do m,1-;t and are used m practical work 
d Fundamentally, the factorrng proces<> r-; merely a more or less simple mathematical method 
of studymg the phenomena of per1od1c1ty m cryptograms 
It will usually enable the crypt- 
analyst to asce1 tam defimtely v. hethPr or not a g1ve11 cryptogram rs pe11od1c m nature, and rf 
so, the length of the penod, stated i"l terms of the cryptographic unit inuolied 
By the latter 
statement is meant that the factoring pt cress may be applied not only m analyzmg the penod1c1ty 
mamfested by cryptograms m wlnch the plam-tevt umt::, sub1ected to cryptograplnc treatment 
are monograph1c m naLHP (1 e are <>mg!<' lettefb) but also 111 btudym~ the pe11odic1ty ei..lubited 
by those occa-;10ral c1yptogiams v.heieM the rlan1-text umts me ciigrapluc, tngrapluc, or 
n-graphrc m character The student should bc,ir tins pomt m rnmd when he comPb to the study 
of subst1tut10n systems of the latter sort 
However, the p1esent text v.111 Jral solely with cases 
of the former type, whe1em the plam-te:i-t umb svb]f'Lted to c1yptograpl11c treatment are <>mgle 
letters 
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11 Second step d1stributmg the cipher text mto the component monoalphabets -a 
After the number of cipher alphabets mvolved m the cryptogram has been asce1 tamed, the next 
step is to rewrite the message m groups correspondmg to the length of the key, or m columnar 
fashwn, whichever is morn convement, and this auiomat1cally d1v1des up the text so that the 
letters belongmg to the same cipher alph11bet occupv smular poc1t10ns m the groups, or, if the 
columnar method is used, fall rn tLe same column 
The letters are thus allocated or distributed 


mto the respective cipher alphabets to \\hICh they belong 
This reduces the polyalphabet1c 
text to monoalphabet1c terms 
b Then separate umhteral frequency d1st11b11t10ns for the thus rnolated md1v1dual alphabets 
are compiled For example, m the case of the cipher on page 13, navmg determmed that four 
alphabets are mvolved, and havmg rewntt<'n the message m four columns, a frequency d1stribu- 
t10n is made of the letters m Column I, another is made of the letters m Column 2, and so on for 
the rest of tho columns 
l!,ach of tl.e resulting dislJibutions i:s therefore a rt1onoalphabet1c frequency 


distribution 
If these d1stubut10ns do not give the characteristic irregular crest and trough 
appearance of monoalpll.lbetic frequency d1stnbut10ns, then the analysis \\lnch led to the 
hypothesis as regards the number of alphabets i,1volved is fallacious 
In fact, the appearance of 
these md1v1dual d1stnbut10ns may be considered to be an rnde'C of tl,e corrertness of the factoring 
process, for theoretically, and pmct1cally, the md~ndual distubut10ns constructed upon the 
correct hypothesis will tend to conform more closely to the irregular crest and trough appearacne 
of a monoalphabet1c fiequency distribution than will the graphic tables constructed upon an 
mcorrect hypothesis 
'l'hese md1v1dual d1stnhut10ns may also be tested for rnonoalphabet1city 
by statistical methods 


12. Third step. solvmg the monoalphabet1c distributions -Thr difficulty experienced m 
analyzmg the md1vidual or isolated f1cquency d1stubut10ns depends niostly upon the type of 
cipher alpnabets that 1;, used 
It is app'Hent that mixed ulphabets may be used 1ust as easily as 
standard alphabets, and, of course, the cipher letters themselves give no md1cai10n as to which 
is the case 
However, 1ust as it was found that m the case of monoalphabetic subst1tut10n ciphers, 
a umhteral frequency distubut10n gives clear md1catwns as to whether the cipher alphabet 1s a 
standard or a rmxed alphabet, by the relative positions and c-..tenc10ns of the crests and troughs 
m the table, so it is found tbat m the case of repeatrng-key c1phns, umhteral frequency distnbu- 
t10ns for the isolated or md1v1dual alphabets will also gwe cleai mdicat1ons as to whether these 
alphabets are standard alphabets or mn..ed alphabets 
Only one or two such frequency d1stribu- 


t10ns aie necessary for tlus <letermmat10n, if they appear to be standard alphabets, smnlar distri- 
but10ns can be made for the rest of the alphabets, but if they appear to be mixed alphabets, then 
it is best to compile tnhteral frequency d1stnbut10ns for all the nlphabet<i 
The analysis of the 
values of the ciphei letters 111 each table proceeds dong the same lmes as m the case of monoalpha- 
bet1c ciphers 
The analysis is more difficult only because of the re<luced size of the tables, but 


if the message be very long, then each frequency distnbut10n will contam a sufficient number of 
elements to enable a speedy solut10n to be achieved 


SECTION IV 


REPEATING-KEY SYSTEMS WITH STANDARD CIPHER ALPHABETS 
Paragraph 


-------------- -- - --- ------ 
13 
Solution by applyrng principles of frequency__ 
-------- - ---- -- ------- - -- ---- -- -- 
__ __ ______ 
l4 


Solution by rompletmg the plam-component sequence 
- ------ -- ---- -- -- -------------- ---- 
15 


Solution by the "probable-word method"---- 
- ------- -- ------------------ ----- - ----- ----------- ------------- 


13 Solution by applymg prmciples of frequency -- a In the hght of the foregoing prmnples, 


let the followmg cryptogram be studrnd 
MESSAGE 


1 
A 
A U K.J:! Y 


B 
E T I M I 
c 
D P V X K 


D 
N L U F M 


E 
A J Z X I 


F 
AL AH Y 


G 
B V Z V I 


H 
W F Q__Q__K 


J 
Z L A M V 


2 
J A M K I 
ZHBHR 


Q !UL!:! Q 
P Z J NV 
G U M T V 
P 0 E X W 
Z I I V 0 
N L L L E 
K F M W F 
A A E X I 


3 


Z Y MW M 
A Y M Z M 
L H V R M 
C H U A S 


D f_T E J_ 
P V N Y E 
S P T E G 
P T I K W 
N P L Z I 


J L U F M 


4 
5 


J M I G X 
N F M L X 
I L V M E 
J K U T G 


J A Z N G 
G Z V X E 
H K Q G K 
I P L W P 


E C M Y S 
Q Y B A V 


E Y X E E 
U D P X R 
K U B B R 
Q L L X P 


D J Z X I 
G 0 I 0 I 


O V V F M 
Z K T X G 


P Z J N V 
C A I G I 


L 
UAWPR 
NVIW~KZAS ZLAE._M 
HS 


K 
!:iJ: M D F 


A 
h for repetitwns discloses the followmg short hst with the mtervals and factors 
scare tt d (for prev10us experrnnce may lead to the conclus10n that it is unlikely that the 
above 10 om1 el 
th 
10 alphabets showmg the number of recurrences which it does) 
cryptogram mvo ves more 
an 
' 


Repetition 
Locat10n 
Interval 
Factors 


LUFMPZJNVC 
Dl. K3 
160 
2, 4, 5, 8, 10 


JZXIG 
- 
El, H4 
90 
2, 3, 5, 6, 9, 10 


EJK 
B4, L2 
215 
5 
-- 
- 
PTE 
- 
E3, G3 
50 
2, 5, 10 
- 


QGK 
04, Hl 
85 
5 


UKH 
AL C2 
55 
5 


ZLA 
JL L4 
65 
5 
- - 
AS 
- 
D3, L3 
175 
3, 5, 7, 


EJ 
B4, L2 
115 
5 
- 


FM 
A5, Dl 
57 
3 
- 
- 


FM 
A5, J2 
185 
5 
- 
- - 


FM 
-- 
__ ,.._ 
J2, J4 
12 
2, 3, 4, 6 


FM 
- -- - 
J4, K3 
20 
2, 4, 5, 10 
- 


FM 
- 
-- 
K3, L4 
30 
2, 3, 5, 6, 10 
-- 
2, 3, 4, 5, 6, 10 
JA 
A2, C4 
60 


LA 
- 
Fl, Jl 
75 
3, 5 


LA 
JL L4 
65 
5 


LL 
G5, H2 
10 
2, 5 


NL 
- 
Dl, H2 
105 
3, 5, 7 
- 
3, 5, 9 
NL 
- 
H2, Kl 
45 
------ 
2, 4, 5, 10 
vx 
- 
- - -- 
CL C5 
20 
-- - 
-- 


YM 
A3, B3 
25 
5 
- 
- - 


(17) 
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b The factor 5 appears mall but t"o cn<Jrq each of h h 
l 
almost certain that the number of al1,lrnlwt~ " fi - 
S " 'If' mvo ves only a digraph 
It seems 
five letters, It IS unnecescrnry to ren II'e tl 
l'l 1\ e 
' ~nee the t0xt alioady uppea,rs lll groups of 


~u 
" 
c 
ie moss•1•re 
The ne t t 
t 
] 
quency d1stnbut10n for Alphabet 1 t 
f t 
, L l 
x s ep h 
o ma rn a umhteral fre- 
bets are involved 
It is as follows o see I I ( ,1Jl e c rtcuPmcd '' hether or not -it<tndard alpha- 


ALPHABr:; r 1 


~--:::::~~ 
::::~~~~- 
?'._/ 


A B C D E F G H I J K L M N O p Q R S T U V W 
X y ~ 


c Although the md1cat10m air' not ver 
< l' 
,t 
f 
small an:o11nt of data the n-,sun t 
f 
1 } 
cdl ( t 
' yet I one takes rnto cons1derat1011 the 


test 
Accorclmo-ly a m~il,"1 c11s1tpr1b10t~1t10. ,i < Irf'Otl -,tficn<AL1l1d alplrnbet 'l.ith Wc~Ap, Is \\Oith further 


0 
~ 
1 
Oil is m11c e or 
phul-iet 2 


ALPHABFT 2 
- 
~ 
- 
;::::: 
-- 
ABCDEFG-H~-~~~- 
~~ 
--~~ 
~- 
I J K L M N 0 p Q R s i G ~ w x i z 


d '""l 
b t 
; iere is every md1cat10n of 'l direct stnndird al11h,t~•<'t with H -fl 
Let "lIIHlar d1-,tn- 


u IOrti >e made for the t1'>t thrrc alphrbrt<i 
'T'bry .,r; 'LS follm\c, 
" - 
v 


Ar PHAin r ) 


:::::~ 
' 
~-- 
:::::;;!-. 
-==-- 
A B C D E F G H I J K ~ ~ ~ o ~ ~ R S T U ~ j i y ~ 


ALPHABET 4 
- 
"":::: 
-- ;:::: 
::::::: 
:-::: 
ABCDEFGHIJKL~~OPQRSTUV~~YZ 


ALPHABET .5 


~ 
::-:: 


~::::: ~ 
~ 
:::::: 
~ 
ABCDEFGHIJKLMNOPQ~~TU~WXYZ 


e After but little expenm 
t t 
f 
l 
the nor 
1 h 
th f 11 
en I Is 
Olmc that tre chstubut10ns can best be made to ht 
ma w en 
e 0 o~mg values are assumed 


Alphabet L _______ AP-= w 


0 
Alphabet 2 _________ Av=Hc 
.Alphabet 3 _________ Av= I. 
Alphabet 4 _________ Ap= T 


0 
Alphabet 5 _________ Av=Ec 


f Note the key "ord give b th 
the correctness of the anal "l n y 
e successive eqmvalcnts of Av WHITE 
The real proof of 
cryptogram 
Th fi T 
Y~l s I'l, of course, to test the values of the solved alphabets on the 
e n e comp ete cipher alphn bets are as follo" °' 
Plam __ 1 
__ l __ ----- -- A B C D E F G H I J K L M N 0 E..JLB S T U V W X y z 


2 ----------- W X y Z A B C D E F G H I J K L M N O p Q R S T u V 


C1 her 3 ------ ---- H I J K L M N 0 p Q R S T U V ii X y z A B C D E F G 
p 
4 
----------- I J K L M N 0 P Q R S T U V W X Y Z A B C D E F G H 
----------- T U V W X Y Z A B C D E F G H I J K L M N O p Q R S 


5-----···--.. .S F G H J: J K L M N 0 P Q R S T U V W X Y z A B C D 


FIGURE 2 
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g Applymg these values to the first few groups of our message, the followmg i-, found 


1 
2 
3 
4 
5 


Cipher ------ A U K H Y 
Plam__________ E N C 0 U 


1 
2 
3 
4 
5 
J A M K I 
NT ERE 


1 
2 
3 
4 
5 


Z Y M W M 
D R E D I 


1 
2 
3 
4 
5 


J M I G X 
N F A N T 


1 
2 
3 
4 
') 


NF ML X 
R Y E S T 


h Intelhg1ole text at once results, and the solut10n can now be completed vmy qmckly 


The complete message is as follows 


ENCOUNTERED RED INFANTRY ESTIMATED AT ONE REGIMENT AND MACHINE GUN COM- 
PANY IN TRUCKS NEAR EMMITSBURG 
AM HOLDING MIDDLE CREEK NEAR HILL 543 SOUTH- 
WEST OF FAIRPLAY 
WHEN FORCED BACK WILL CONTINUE DELAYING REDS AT MARSH 
CREEK 
HAVE DESTROYED BRIDGES ON MIDDLE CREEK BETWEEN EMMITSBURG-TANEYTOWN 
ROAD AND RHODES MILL 


i In the foregoing example (wlud1 is typical of the system erroneou-,ly attributed, m cryp- 


tographw literature, to the French cryptog1 aphcr V1genere, although to do lnm JU<it1ce, he 
made no rla1m of havm!; "mvcnted" it), direct standa1d alphabets were u-,ed, but it is obv10us 
that reversed standard alphabets n1ay be used and the solut10n accomplished m the same 
manner 
In fact, the now obsolete ophcr d1-;k used by the Umted States Army for a number 
of yPars yields exn"tly th1.;; type of cipher, "lmh is l'lso kno\vn m the literature a<i the Beaufort 
Cipher, and by other names 
In fittmg the ISolated froquern y distnbut10ns to the normal, the 


d1rect10n of "readmg" the crest<i and troughs is merely reversed 
14 Solut10n by completmg the plam-component sequence -a Thern is another method 
of solvmg tlns type of cipher, which is worthwlnlc explammg, because the underlymg prmc1ples 
will be found useful m many cnses It is a mod1ficat10n of the method of solut10n by completmg 
the plam-component sequence, nheady explamed m "&hlitary Cryptanalysis, Part I 
b After all, the md1v1dual alphabets of a cipher -,uch as the one 1ust -,olved are merely 
direct standard alphabets It has been seen that monoalphabet1c ciphers m which standard 
cipher alphabets are employed may be solved almo-,t mechamcally by completmg the plam- 
component sequence 
The plam text reappears on only one genemtrn .. and tlns generatnx is the 
same for the whole me":oage 
It is easy to pick this generatnx out of all the other generatrices 
because it is the only one wluch yields mtoH1g1blc text Is it not apparent that if the same process 
is applied to the cipher letters of the indundual alphabets of the cipher 1ust solved that the plam- 
text eqmvalents of these letters must all reappear on one and the same generatnx? But how 
will the generatrn which actually contam-; the plam-text letters be d1stmguIShable from the 
other generatnce<i, -,mce the-,e plam-text letters are not consecutive letter.;; m the plam text but 
only letter'> separated from one another by a constant mtcrval? The answer is simple The plam- 
text generatnx should be d1stmgu1sha blc from the others because it will show more and a better 
assortment of high1requency letters, and can thus be selected by the eye from the whole set of genera- 
trices If this is done with all the alphabets m the cryptogram, it will merely be necessary to 
assemble the letters of the thus selected generatnce-, m proper order, and the result sould be 
consecutive letters formmg mtelhg1ble text 
c An example will serve to make the process clear Let the same message be used as before 
Factormg showed that it mvolves five alphabets 
Let the first ten cipher lettPrs in each alphabet 
be set down m a horizontal lme and let the normal alphabet sequences be completed Thus 
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ALPHABET 1 
ALPHABET 2 
ALPHABET 3 
ALPHABET 4 
ALPH\BET 6 
1 AJZJNEZAIJ 
UAYMFTHYLK 
KMMIMIBMVU 
HKWGLMH.lMT 
YJMXXIRMEG 
2 BKAKOFABJK 
VBZNGUIZML 
LNi\l'Ji\l'JCNWV 
ILXHMNii\NU 
ZJNYYJSNFH 
3 CLBLPGBCKL 
WCAOHVJAl'Ji\11 
MOOKOKDOXW 
JMYINOJBOV 
A1<CZZKTOGI 
4 DMCMQHCDLM 
XDBPIWKBON 
NPPLPLEF'YX 
KNZJOPKCPW 
BLPAALUPHJ 
5 ENDNRIDEMN 
YECQJXLCPO 
OQQMQMFQZY 
LOAKPQLDQX 
CMQBBMVOIK 
6 FOEOSJEFNO 
ZFDRKYMDQ? 
PRRNRNGRAZ 
MPBLQRMERY 
DNRCCNWRJL 
7 GPFPTKFGOP 
AGESLZNERQ 
QSSIJSOHSBA 
NQCMRSNFSZ 
EOSDDOXSKM 
8 HQGQULGHPQ 
BHFTMAOFSR 
RTTPTPITCB 
Q_Fm•STQG'rA 
FPTE;EPYTLN 
9 IRHRVMHIQR 
CIGUNBPGTS 
SUUQUQJUDC 
PSEOTUPHUB 
GQUFFQZUMO 
10 JSISWNIJRS 
DJHVOCQHUT 
TVVRVRKl/FD 
QTFPUVQIVC 
HRVGGRAVNP 
1t KTJTXOJKST 
EKIVvPDRIVU 
UWWSWSU\FE 
RUGQVWRJWD 
ISWHHSBWOQ 
12 LUKUYPKLTU 
FLJXQESJWV 
VXXTXTMXGF 
SVHRWXSKXE 
JTXIITCXPR 
13 MVLVZQLMUV 
GMKYRFTKXW 
WYYUYlJ • JYl !G 
TWISXYTLl'.F 
KUYJJUDYQS 
14 NWMWARMNVW 
HNLZSGLJLYX 
XZZVZVOZIH 
UXJTYZUMZG 
LVZKKVEZRT 
15 OXNXBSNOWX 
IOMATHVl\'.ZY 
YAAVIAWPAJl 
VYKUZAVNAH 
MWALLWFASU 
16 PYOl'.CTOPXY 
JPNBUIWN4.l 
ZBBX:BXQBK.J 
WZLVABWOBI 
NXBMMXGBTV 
17 QZPZDUPQYZ 
KQOCVJXOBA 
ACCYCYRCLK 
XAMYVBCXPCJ 
OYCNNYHCUW 
18 RAQAEVQRZA 
LRPDWKYPCB 
BDDZDZ5DML 
YBNXCDYQDK 
PZDOOZIDVX 
19 SBRBFWRSAB 
MSQEXLZQDC 
CEEAEATF"lM 
ZCOYDEZREL 
QAEPPAJEWY 
20 TCSCGXSTBC 
NTRFY~ARED 
DFFBFBVfON 
ADPZEFA.SFM 
RBFQQBKFXZ 
21 UDTDHYTUCD 
OUSGZNBSFE 
EGGCGCVGPO 
BEQAFGBTGN 
SCGRRCLGYA 
22 VEUEIZlJVDE 
PVTHAOCTGF 
FHHDl-JDWHOP 
CFRCG!-fCUHO 
TDHSSDMI-!ZB 
23 WFVFJAVWEF 
QWUIBPDUHG 
GU8ICXIRQ 
DGSCHID'JIP 
UEITTENIAC 
24 XGWGKBWXFG 
RXVJCQEVIH 
HJJFJFYJSR 
EHTDIJEWJQ 
VFJuUFOJBD 
25 YHXHLCXYGH 
SYWKDRFWJI 
IIG<GI<GZKTS 
FIUEJKFXKR 
WGKVVGPKCE 
26 ZIYIMDYZHI 
TZXLESGXKJ 
JLLHLHALUT 
GJVFKLGYLS 
XHLWWHQLDF 


FIGURF 3 


d If the high-frequency genera trices under lmed m Figure 3 are selected and their letters 


aie JUXtaposed in columns the consecutive letters of mtelhg1ble plam text immediately present 
themselves 
Thus 


/ 


For Alphabet 1, generatux 5 _______________________ E N D N R I D E M N 
For Alphabet 2, geneIJ,tnx 20 _____________________ N T R F Y M A R E D 
Selected Generatuces For Alphabet 3, gcneratnx 19 _______________________ C E E A E A T E N M 
For Alphabet 4, generatrix 8 ------------------------ 0 R D N S T O G T A 
For Alphabet 5, generatrrx: 23 ______________________ U E I T T E N I A C 


1 2 3 4 5 
E N C 0 U 
NT ERE 
D R E D I 
NF ANT 
Columnar 1uxtapos1t10n of letters R Y E S T 
from selected gcneratrices ______ I M A T E 


F!GUB.E4 


D A T 0 N 
E R E G I 
M E N T A 
N D M A C 
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Plamtext ENCOUNTERED RED INFANTRY ESTIMATED AT ONE 


REGIMENT AND MAC 


e Solut10n by this method can thus be aclneved without the comptlat10n of any frequency 
tables \\hatever and is very qmckly attamed 
The me'l:perienced cryptanalyst may have drlh- 
c11lty at first m selectmg the generatrices which contam the most and tlw lwst a<Jsortment of 
high-frequency letters, but \v1th mcrea<Jed practice, a lngh degree of prof ciency is attamed 
After all it is only a matter of experiment, trial, and error to select and assemble the proper 
generatrices so as to produce mtelhgible text 
j If the letters on the shdmg strips \\ere accompamed by numbers representmg their rehtrve 


freq uenmes m plam text, and these numbers were added across each genera tux, then that gen- 
eratrix \\1th the highest total frequency \vol'ld theoretically always be the plam-text generatri'I: 
Practically it ""ill be among the genera trices \\ luch show the first three or four greatest total~ 
Thus, an entirely mathematical solut10n for this type of cipher may be applied 


g If the cipher alphabets are reversed standard alphabets, it is only necessary to convert 
the cipher letters of each isolated alphabet mto their normal, plum-component cqmvalents and 
then proceed as m the case of dirrct standard alphabets 
h It has been seen how the key\\ ord may be discovered m tlns type of cryptogram 
Usually 


the key is made up of those letters m the successive alphabets whose eqmvalents are AP but other 
convent10ns are of course possible 
Sometrmes a key number is used, such as 8-4-7-1-12, 
wlnch means merely that AP is represented by the eighth letter from A (m the normal alphabet) 
m the first mpher alphabet, by the fourth letter from A m the second cipher alphabet, and so on 
This modificat10n is known m the literature as the Gronsfcld cipher 
Ho\\ ever, the method of 
solution as illustrated above, bemg mdependent of the nature of the key, is the same as befo1c 
15 Solution by the "probable-word method "-a The common use of key words m cryp- 
tograms such as the foregomg makes po<Jsible a method of solut10n that is simple and can be used 
where the more detailed method of analysis usmg fiequency distribut10ns or by completmg the 
plain-component sequence is of no avail 
In the case of a very short message wlnch may show 
no recurrences and give no mdicat10ns as to the number of alphabets mvolved, this modified 
method will be found most useful 
b Briefly, the method consists m assummg the piescnce of a probable word m the message, 


and referrmg to the alphabets to find the key lette£s applicable when tlus hypothetical word is 
assumed to be present m var10us posit10ns m the cipher text 
If the assumed \\Ord happens to 
be correct, and is placed m the correct pos1t10n m the message, the key letters produced by 
referrmg to the alphabets will yield the key word 
In the followmg example it is assumed that 


revcrsC'd standard alphabet~ are known to be used by the enemy 


MESSAGE 


MD ST J 
L Q C X C 
K Z A S A 
NY Y K 0 
L p 


c Extraneous circumstancm, lead to the assumpt10n of the presence of the word AMMU- 


NITION 
One may assume that tlns word begms the message 
Usmg shdmg normal compo- 


nents, one reversed, the other direct, the key letters arc ascertamed by notmg what the successive 
eqmvalents of AP are 
Thus 


Cipher ______________ M D S T J L Q C X C 
Plam text__________ A M M U N I T I 0 N 
"Key"_ ---·-··----- M P E N W T J K L P 
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The key does not spell any mtelhgible word 
One therefore slufts the assumed word one letter 


forwJ.rd and another trial 1q made 


C1prer ______________ D s T J L Q c x c K 
Plam text__________ A M M U N I T I 0 N 
"Key"------ ------- D E F D Y Y V F Q X 


This also J 1elds no mtelhg1ble key v.ord 
One contmues to shift the assumed word fon\ ard 
one space at a time until the folio\\ mg pomt 1o; reached 


Cipher_ ------------ L Q C X C K Z A S A 
Plam text__________ A M M U N I T I 0 N 
"Key" __ ----------- L C 0 R P S S I G N 


The key now becomes evident 
It 1s a cychc permutnt10n of SIGNAL CORPS 
It should be 
clear that smce the key "ord or key phrase repeats itself durmg the enc1pherment of quch a 
message, the plJ.In-text word upon whose asst med presence m the message this test is bemg 
based may begm to be enciphered at any pomt m the kev, and contmue over mto its ne-...t repet1- 
t1on if it is longer than the key 
When this 1s the ca'3e 1t 1s merelv necessary to shift the I.1tter 


part of the sequence of key letters to the first part, .is m the case noted LCORPSSIGN is trans- 
posed mto SIGN 
LCORPS, and thus SIGNAL CORPS 


d It will be seen m the foregoing method of solution that th(' lePgth of the key is of no 
particular mterest or consequence m the st('pi;; ta.l'-en m dl('ctmg the solution 
The detennm.i- 
t10n of the length and elements of the key comes after the qolut10n rather than before 1t 
In this 


case the length of the penod is seen to be ('}even, correspondmg to the length of the key (SIGNAL 
CORPS) 


e The foregomg method is one of the other methods of determmmg the length of the key 
(beSides factonng), referred to m Par IOc 
f If the assumpt10n of revcrbed o;tanda1<l alplmbeto; y10ldi;; no good rebult<i, then direct 


standard alphabets are assumed and the test made euctly m the same manner 
As will be 
shown subsequently, the method can also be used a<i a la<it resort when mixed alphabets are 
employed 
g When the assumed word is longer than the key, the sequence of recovered key letters wtll 
show a per10dic1ty equal to the length of the kPy, that is, after a certam number of letters the 
sequence of key letters -will repeat 
This phenomenon would be most useful m the case of keys 
that are not mtclhgible v.ords but are composed of random letters or figures 
Of course, if such 
a key is longer than the assumed word, tlus method is of no avatl 
h Thi<1 method of solut10n by searclung for a word is contmgent upon the followmg cir- 


cumstance.., 
(1) That the word whose presence is assumed actually occuri;; m the message, is properly 
spelled, and correctly enciphered 


(2) That the shdmg components (or eqmvalent cipher disks or squares) employed m the 
search for the llb'>umed word are actually the ones wluch weie employed m the enc1pherment, 
or are sue h as to give identical results as the ones wluch were actually used 
(3) 'lhat the pair of enuphe1mg equations used m the test is actually the pan wluch was 
employed m the enmphennent, or if a cipher square is used m the test, the method of findmg 
eqmvalents gives results that correspond with those actually obtamed m the ene1pherment 
(See par 9) 
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i The foregomg appears to be qmte an array of contmgenc1es and th(' student may trunk 


that on this account the method will of ten fad 
But exammmg these contmgenc1eo; one by one, 


it will be seen that successful application of the method may not be at all rare-after the '>olut10n 
of some messages has disclosed what sort of paraphernalia and method<i of cmploymg them are 
favored by the enemy 
From the foregomg remark it is to be mferred that the probable-word 
method has its greatest usefulness not m an m1t1al solution of a system, but only afte1 succes<1ful 
study of enemy commumcat1ons by more difficult processes of analysis has told its story to the 
alert cryptanalyi;,t 
Although it i<i commonly attributed to Bazer1e<i, the Fr('n<h cryptanalyst 
of 1900, the probable-word method is very old m cryptanalysis and goei;, buck several centuncs 
Its usefulneso; m practical work may best be md1cated by quoting from a competent obi;,erver i 


There is another (method] which is to this first method v. hat the geometric method is to analysis m rertam 
sciences, anrl, accordmg to the whims of md1v1d11als, certam cryptanalysts prefer one to the other Ccrtam others, 
mcapable of gettITJg the answer with one of the methods m the solution of a difficult problem, conquer it by means 
of the other, with a d1sconcertmg masterly stroke 
This other method is that of the p1obable word 
We may 
have more or less definite op1mons concermng the subJect of the cryptogram 
We may know somethmg about its 


date, and the correspondents, who may have been md1screet m the subJect they have treated 
On this basis, the 


hypothc:;,is is made that a certam word probably appears Ill the text 
In certam clMses of doruments, 


military or diplomatic telegrams, bankmg and mmmg affairs, etc, it is not impossible to make "cry important 
a.ssumpt10ns about the presence of certam v.ords m the text 
After a cryptanalyst has v.orked for a lonp; time 


with the wntmgs of certam correspondents, he gets used to their expres&1ons 
He get& a v.hole load of words 
to try out, then the changes of key, and sometrmes of system, no longer throv. mto his V.&\ the d1fficult1e'! of an 
ab<Jolutely new study, wh10h might reqmre the analvt1cal method 


t G1v1erge, M , Co11r8 de Cryptographie, Paris, 1925, p 30 
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16. Reason for the use of nuxed alphabets -a It has been SN'n m the examples ronsidered 


thus far that the use of E>evcral alphabets m the same message does not greatly complicate the 
analysis of such a cryptogram 
There are three reaE>ons '"by this is so 
Firstly, only relatively 


few alphabets" ere employed, secondly, these alphttbets \\ere employed m a penod1c or repeatmg 
manner, givmg rise to cyclic phenomena m the cryptogrnm, by roerms of "'hic,h the number of 
alphabets could be determmed, and, thirdlv, the cipher ulphahPts "ere lcnown alphabets, by 
which is meant merely th11t the seqpenceE. of lettPrs m hoth components of the cipher cl.lphabeto;; 
"'ere known sequenrc'3 


b In the case of monoalphabctic riphPr'3 it ,. as found that the use of a mned alphabet 
delayed the solution to a cons1derahle d<'gI<'e, and it v. Ill now Le seen that the use of mIXed alpha- 
bets m polyalphabetic ciphers render-. the analysis much more difficult than the use of standard 
alphabets, but the solution is sttll fairly easy to achieve 


17 Interrelated mixed alphabets -a It was stat<'d m Par 5 that the method of producmg 
the rmxed alphabets m a pol:y J.lphabetw ciphe1 often affords cine., "'Inch aie of great assistance 
m the analysis of the cipher alphabets 
This is .,o, of comse, only when the cipher alpha.bets 


are mterrclated secondary alphabets produced by shch.1~ components or their eqmvalents 
Reference is now made to the rlassificahon set forth m Par 6, m connection with the types of 
alphabets "'h1ch may be employed m polyalphabetic subst1tut1on 
It "tll be seen that thus far 
only Cases A (1) and (2) ha,e been treated 
Case B (1) wtll now be discussed 
b Here one of the components, the plam component, is the norm.al sequence, whtle the 


cipher component is a mr\.ed sequence, the var1011s JUJ..tapos1t10ns of the t\1110 components yieldmg 
rmxed alphabets 
The rmxed component may be a systemat1cally-mrx:ed or a random-mL~ed 


sequence 
If the 25 successive displacements of the mixed component are recorded m separate 
Imes, a E>ymmetncal mpher square surh as that shown m Fig 5 results therefrom 
It is identical 
m form Mth the square table shown on p 7, labeled Table I-A 


(24) 
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Plain ........•. A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
LEAVNWORTHBCDFGIJKMPQSUXYZ 
EAVNWORTHBCDFGIJKMPQSUXYZL 
AVNWORTHBCDFGIJKMPQSUXYZLE 
VNWORTHBCDFGIJKMPQSUXYZLEA 
NWORTHBCDFGIJKMPQSUXYZLEAV 
WORTHBCDFGIJKMPQSUXYZLEAVN 
ORTHBCDFGIJKMPQSUXYZLEAVNW 
RTHBCDFGIJKMPQSUXYZLEAVNWO 
THBCDFGIJKMPQSUXYZLEAVNWOR 
H B C D F G I J K M P Q S U X Y Z L E A V N W 0 R T 
BCDFGIJKMPQSUXYZLEAVNWORTH 
C D F G I J K M P Q S U X Y Z L E A V N W 0 R T H B 
DFGIJKMPQSUXYZLEAVNWORTHBC 


Cipher_____ 
F G I J K M p Q S U X y Z L E A V N W 0 R T H B C D 
GIJKMPQSUXYZLEAVNWORTHBCDF 
IJKMPQSUXYZLEAVNWORTHBCDFG 
J K M P Q S U X Y Z L E A V N W 0 R T H B C D F G I 
K M P Q S U X Y Z L E A V N W 0 R T H B C D F G I J 
MPQSUXYZLEAVNWORTHBCDFGIJK 
PQSUXYZLEAVNWORTHBCDFGIJKM 
Q S U X Y Z L E A V N W 0 R T H B C D F G I J K M P 
S U X Y Z L E A V N W 0 R T H B C D F G I J K M P Q 
UXYZLEAVNWORTHBCDFGIJKMPQS 
X Y Z L E A V N W 0 R T H B C D F G I J K M P Q S U 
YZLEAVNWORTHBCDFGIJKMPQSUX 
ZLEAVNWORTHBCDFGIJKMPQSUXY 


FtGURJ: s 


c Such a cipher square may be used m cxJ.ctly the same manner as the Vigenere square 


With the key \\Ord BLUE and conformmg to the normal enr1phenng equations {811:12=8111, 8111i= 
8 012) 1 the followmg Imes of the square wou.ld be used 


ABCDEFGHIJKLMNOPQRSTUVWXYZ 
B C D F G I J K M P Q S U X Y Z L E A V N W 0 R T H 
L E A V N W 0 R T H B C D F G I J K M P Q S U X Y Z 
UXYZLEAVNWORTHBCDFGIJKMPQS 
EAVNWORTHBCDFGIJKMPQSUXYZL 


FIGVRll.6a 


These Imes would, of course, yield the followmg cipher :ilphabets 


Plam________ ___ A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


(l) Cipher _________ B C D F G I J K M P Q S U X Y Z L E A V N W 0 R T H 


Plam___________ A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
(2) Cipher_________ L E A V N W 0 R T H B C D F G I J K M P Q S U X Y Z 


Plam 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 
{B) C1ph;;~~~~~~~~~ U X Y Z L E A V N W 0 R T H B C D F G I J K M P Q S 


Plam 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


(4) C1ph;;~~~~~~~~~ E A V N W 0 R T H B C D F G I J K M P Q S U X Y Z L 


FIGURE Gb 
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18 Pnnc1ples of direct symmetry of pos1t1on -a It was stated directly above that Fig 5 
Is a symmetucal cipher square, by which is meant that the letters m 1tb succesb1ve horizontal 
lmeb ..,bow a symmetry of position 'nth respect to one another 
'l'hey constitute, m reality, one 
and only one c;equence or serms of letters, the sequence& hem~ merely displaced successively 1, 
2, 3, 
mtervals 
The symmet1y ff\.h1b1ted is obvious and is s111d to be v1s1ble, or direct 
This fact can be used to good advantage, as has aheady been alluded to m par 7J 
b ConBlde1, for example, the pair of lette1s G0 and Va m mpher alphabet (1) of Fu~ 6b 
The 
letter Vo is the 15th letter to the right of Ga 
In mpher alphabet (2), Va 1c; also the 15th letter to 
the right of G0 , as is the case Ill each of the four opher alphabets m lhg 6b, smce the relative 
pol'i1t10ns they occupy are the same m each horu;ontal hne m Fig 6a, that is, m each of the c;uc- 
cel'.s1ve recordmgs of the cipher component as the l ttcr 1s shd to the right agamst the plam or 
normal component 
If, therefore, the relative pos1t1ous occupied by two letters, 8 1 and e2, m 
such a cipher alphabet, C1, are known, and if the pos1t;ion of 81 m another cipher alphabet, C2, 
belongmg to the same senes Is known, then SJ may at once be placed mto 1t<1 correct pos1t1011 m C2 
Suppoc;e, for example, that as the result of an analysis Lased upon cons1derat10nc; of frequency 
the followmg values m four cipher alphabets have been tentatively <leteumned 
(1) Plam ___________ A B C D E F G H I J K L M N 0 P Q R S T U V W X Y z 


Cipher_________ 
G 
Y 
V 


(2) Plam___________ A B C D E F G H I J K L M N 0 P Q R S T U V W X y z 


Cipher_________ 
N 
G 
p 


(a) Plam___________ A B C D E F G H I J K L M N 0 P Q R S T U V W X y z 


Cipher_________ 
L 
B 
I 


(4) Plam ___________ A B C D E F G H I J K L M N 0 P Q R S T U V W X y z 


Cipher______ _ 
W 
I 
Q 


FIGURE 7a 
c The cipher components of these four secondary alphabets may, for con\emence, be assem- 
bled mto a cellular structure, heremafte1 culled a sequence reconstr'Uctwn skeleton, ac; shown in 
Fig 7b 
Regardmg the top lme of the reconstruct10n skeleton m lhg 7b as bemg common to all 


four secondary cipher alphabets listed m Fig 7 a, the successn e line.., of the reconstruction skeleton 
may now be termed cipher alphabets, and may be referrell to by the numbers at the left 


Plam_ ------------ A I B I C D E F G H I J K L M N 0 P Q _I R S T U j V W X y z 


~=========~======~~===~=== 
!_________ 
G 
Y 
V 
-------------------------------- 
2_________ 
N 
G 
p 


C~& 
-------------------------- 
3_________ 
L 
B 
I 
4 ________ _ 
---;,------- ____ ! ___ ---Q ------ 


FIC'URll: 7b 


d The letter G is common to Alphabets 1 and 2 
In Alphabet 2 it 1s noted that N occupies 


the 10th posit10n to the left of G, and the letter P occupies the 5th pos1t1on to the nght of G 
One ma) thmcfore place these letters, N and P, m thl'lr propn pos1t10ns m Alplrnbet 1, the letter N 
bemg placed 10 letters before G, and the letter P, 5 letterb af tPr G 
Thu& 


Plam - ---- - A_I B \ C ~~\~J_:_j~!__l~J~)__::_~j~J~~,~~j-~_J T U j V W X yz 


i__ ______ I I -Gl_l_l __ /P-i-1--1-IY--J--l-/7=;;=1===== 
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Thus, the values of two new letters m Alphabet 1, viz, Pc=Jp, and Nc=Up have beeL al.tomati- 
cally determmed, these values were obtamed without any an•1lyb1s based upon thefrequency of 
p 
0 and N0 
Like\\1se, m Alphabet 2, the letters Y and V may be mserted m thet'ie pos1t1011s 


Plam 
A B C D J E I F J G I H J I I J ~ 
~ 
_!_)~ ~ P J Q J R I S J T J 
~J_!_J!!__j~ !._)~ 


2 _______ ====;1=;1=1=1~1=1=---1- a--1-1-1-1-P1_1_1_1--Y1- 


This gives the new values V.=Dp and Y.=Yp m Alphabet 2 
Alphabets 3 and 4 lrnYe a rnmmon 


letter I, \\luch permits of the placement of Q and Wm Alphabet 3, and of B and L m Alphabet 4 
e The new values thus found are oi cottu.,e unmecl111tely mserted tluoughout tlw m.rpto- 


gram, thus leadmg to tlw assumpt10n of further v11lnes m the cipher te:ll.t 
Thie; procec;;s, viz, the 


reconbtruction of the primary components, by the application of the prmc 1ple.., of direct S) mmctry 
of posit10n to the cells of the reconstruct10n skeleton, thus fn.mbtat<>s J.nd hrstcns <iolution 


j It must be clea• ly understood that before the pnnc1ples of direct <i' mmetry of pos1t10n 


can be applied m cases such as the foregomg, it is necessary that the plazn component be a /.,nown 
sequence 
Whether it is the normal sequence or not Ib munate1111l, so 1011g as the s<>1uenc,e is 


known 
Obv10usly, 1f the sequence Il'i unknown, c;;ymmetry, even if present, cannot be detected 
by the cryptanalyst because he has no base upon '\h1ch to try out his assumption& f01 
symmetry 
In other words, direct symmE>try of posit,10n is mamfested m the 1lluc;;trat1ve 
example because the plam component is a known &equence, and not beca.use it is the 
normal alpha.bet 
The s1gmficance of this pomt will become apparent later on m connect10n 
\\Ith the problem discussed m Par 26b 
19 Initial steps in the solution of a typical example --a In the light of the foregomg pnn- 
c1rles let a typical message now be studied 


A 


B 
c 


D 


E 


F 


G 


H 


J 


K 


L 
M 


N 


p 


Q 


R 
s 


MESSAGE 


2 
3 
4 
5 


g W B R I 
V W Y C A 
I S P J L 
R B Z E Y 
Q W Y E U 


LWMG~W--=I:......:.CJCI 
MTZEI 
MIBKN 
QWBRI 
VWYIG 
BWNBQ 
QCGQH 
IWJ~K~A.__GEGXN 


I D M R U 
V E Z Y G 
Q I G V N 
C T G Y 0 
B P D B L 


V C G X G 
B K Z Z G 
I V X C U 
N T Z A 0 
B W F E Q 
Q L F C O 
M T ~ 
C C B Y Q 
0 P D K A 
G D G I G 
==--- 
v P W M R 
Q I I E ~W_..=I.....:C:::~CwX:.:_:G,_-=B L G Q Q 
V B G R S 


M Y J J Y 
Q V F W Y 
R W N F L 
G X N F W M C J K X 
I D D R U 
0 P J Q Q 
Z R H C N 
V W D Y Q 
R D G D G 
BXDBN 
PXFPU 
YXNFG 
MPJEL 
SANCD 


S E Z Z G 
I B E Y U 
K D H C A 
M B J J F 
K I L C J 
M F D Z T 
C T J R D 
M I Y Z Q 
A C J R R 
S B G Z N 
Q Y A H Q 
V E D C Q 
L X N C L 
L V V C S 
~ 
I I 
I V J R N 
W N B R I 
V P J E L 
T A G D N 
I R G Q P 


A T Y E W 
C B Y Z T 
E V G Q U 
V P Y F L 
L R Z N Q 
X I N B A 
I K W J Q 
R D Z Y F 
K W F Z L 
G W F J Q 
QWJYQ 
IBWRX 
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b The pnnc1pal repet1t1ons of three or more lPtters have been underlined m the message and 


the factors (up to 20 only) of the mtervals between them are as follows 


QWBRIVWY___ 
__ 
45=3, 5, 9, 15 


CGXGB___ ____ 
60=2, 3, 4, 5, 6, IO, 12, 15, 20 
PJEL __ ---- 
95=5, 19 


ZZGI_ _______ 145=5 


BRIV __ ----- 285=3, 5, 15, 19 
BR! __ ---- 
45=3, 5, 9, 15 
KAG___ 
75=3, 5, 15 
QRD ________ 165=3, 5, 15 


QWB ___ -- 
45=3, 5, 9, 15 
QWB _______ 275=5, 11 
WIC ________ 130=2, 5, IO, 13 
XNF __ ---- 
45=3, 5, 9, 15 


YZT ________ 225=3, 5, 15 
ZTC _____ 145=3, 5 


The factor 5 Is common to all of these repetitions, and there seems to be eve1y mdication that 
five alphabets are mvolved 
Smee the message already appears m groups of five letters, it is 


unnecessary m this case to rewnte it m groups corresponding to the length of the key 
The 
umhteral frequency d1stnbution for Alphabet I IS as follows 


-. 
i!: 
:::: 
~ 
~ 
~~~ 
~ 
~ 
~~~-~-~~~~ ~~- 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


FIGURE 8 


c Attempts to fit this d1stnbut10n to the normal on the basis of a duect or reversed standard 


alphabet do not give posit1ve result!:,, and it is assumed that mixed alphabets are mvolved 
IndiVIdual tnhteral frequency dii:,tnbut10ns are then compiled and are shown m Fig 9 
These 
tables are sirmlar to those made for smgle rm:i..ed alphabet ciphers, and are made m the same 
way except that mstead of taking the lettE'rs one after the other, the letters which belong to the 
sepaiate alphabets now must be aqsembled m separate tables 
F01 example, m Alphabet I, 


the tngraph QAC means that A occurs m Alphabet I, Q, its prefix, occurs m Alphabet 5, and C, its 
suffix, occurs m Alphabet 2 
All confusion may be avoided by placmg numbers mdicating the 


6 l 2 


alphabets m which they belong above the letters, thus QAC 


ALPHABET 1 
A B c D E F G H I 
J 
K L M N 0 
p Q R s T u v w x y z 


QC GW NT 
TV 
AE 
AS 
UD UW IT UT QP NX -W LB LA LA 
IW NN QI UX QR 
PT OP TC 
AD 
WC 
FI QX II 
UP 
YW YW DE 
IW 
GK TT 
LX 
HW 
FW LV OT 
NW QD RB 
UE 
OW WB 
LW 
ND 
LR SY 
QC QD 
LC 


GL 
GV 
WC 
GI 
GP 


GX 
WC 
GP 
QL 
QB 
XD 
AB 
RI 
NW 
GB 
JF 
YV 
QE 
IV 
DI 
NY 
IP 


NR 
SW 
UP 
AK 
QW 


QB 
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ALPHABET 2 


A B c D E F G H I 
J 
K L M N 
0 
p Q R s T u v w x y z 


SN RZ IJ IM GG MD 
MB 
IW QF 
WB 
BO 
ZH IP MZ 
IX QB GN MJ 
TG VG QG GG VZ 
QG 
B7 BG 
OD 
IG 
CG 
QF VY BO QA 


IE VG ID SZ 
QI 
MJ CB RG VD 
KL 


SG IG KH 
MY 
CY MJ RZ 
XN 
IW AJ 


A B c D E F G H I 
J 
K 
YH WR 
PB BY WE CQ RC IE CC 


IK 
PK 
LC EX DC 
WK 
WR 
DR 
VW IV 
YJ 


CY 
WY 
XP TY 
CK 


WI 
XB 
wz ex 
PQ 


NR 
FZ 
WJ DI 
PE 
EC 
ex 
BJ 
LQ 
TR 
BR 
CR 


DD 
VR 


BZ 
PE 


AD 
WY 
RQ 
VQ 


A B C D E F G H I 
J 
K 


ZO NQ YA GG ZY NL MW AQ YG PL BN 
DL JI GN YU NW 
YL GG JY JA 
DN XU 
ZI NG 
BI JF DA 
NA FO 
FQ 
WQ JX 
HN 
IW 
FQ 
ND 
JL 
HA 
JL 


W 
YW 
DQ 
NL 
vs 


11>2018-38-'l 


ALPHABET 3 


L M N 
0 
IC WG WB 
DR WF 
XF 
XF 
AC 
xc 
IB 


ATPHABET 4 


vw 
LZ 
NZ 
LV QY PF 
OJ 
MY 
IJ LM YN 
MJ 
CJ 
EG QB LN 


VJ 
AY 
VY 
VY 
BN 
IJ 
BF 
RN 
VD 
QB 
KF 
GF 
QJ 


P Q 
~ S T U V W X Y Z 
SJ 
VC PM VC WC BE 
KJ 
WE TE 
BR 
WI EY 
TZ KZ 
IZ TA 
TE EZ 
BZ RN 
PH DY 


L M N O P Q R S T U V W X Y Z 


WR ZQ 
FU GH BI 
GN FY GN ZG ZG 


GQ BI 
GG GO YT 
JQ MU 
GG BQ ZG 
GP GS 
DQ DT 


GU DU 
EU YQ 
JD 
ZF GN 
JR 
JQ YT 
JN 
FL 
BI 
wx 


A B c 
CI 
KG 
KG 
CM 
BI 
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ALPHA.BET 5 


D E F G H I 
J 
K L M N 0 
p 
Q R s T u 
cs 
JK IB QI RV CM 
JR 
KQ YB QA BQ MQ RM ZC EL 


RM 
YK YQ 
CM 
BV 
XI AB 
EQ RS CQ ZC RV 


XB 
EM 
FG 
VC CM 
YO 
ZE CN 


ZI 
RV 
ES 
CV 
QV 
RO 
IV 
II 
CL 
BP 
QZ 
PY 


XB 
RV 
ET 
ZQ 
YR 
YK 


DB 
HL 
RW 
ZA 
QV 
FM 
ZG 
DI 
HV 


ZI 
CL 
NX 
JR 
JQ 
YI 


Condensed table of repetitioni. 


1-2-3-4-5-1-2-3 
Q W B R I V W Y-2 


2-3-4-5-1 
C G X G B-2 


2-3-4-1 
P J E L-2 


3-4-5-1 
B-R-I-V 
Z-Z-G-I-2 


1-2-3 
Q W B-3 
V W Y-2 


2-3-4 
C G X-2 
P J E-2 
W B R-2 
X N F-2 


3-4-5 
B R I-3 
G X G-2 
J E L-2 
Y Z T-2 
z z G-2 


4-5-1 
KA G-2 
X G B-2 
Z G I-2 
Z T C-2 
R I V-3 


5-1-2 
I V W-2 
Q R D-2 
W I C-2 


FIGtlBB 9 


v w x y 
GI KI EQ 
EI R- JQ 
FM 
EC 


1-2 
Q W-5 
V P-3 
V W-3 


2-3 
c G-3 
c J-3 
p J-3 
w B-3 
W F-3 
W Y-3 
X N-3 


3-4 
B R-3 
G Q-4 
G X-3 
J R-3 
N F-3 
y Z-3 


4-5 
R I-3 
y Q-3 
Z T-3 


5-1 
G B-4 
I V-3 
Q Q-3 


WR 


z 
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d One now proceeds to nnaly7e each alphabet distribution, m an endeavor to estnbhsh 


identifications of cipher eqmvnlents 
First, of comse, attempts should be made to separate 
the vowels from the consonants m each alpha.bet, usmg the same test as m the case of a smgle 
mu .. ed-elphabet cipher 
Theie seems to he no doubt about the eqmvalent of EP m each alphabet 


1 
2 
3 
4 
5 
E= Ie, W0 , Ga, Ce, Qc 


e The letters of greatest freq11f'nC'y m Alphabet 1 are I, M, Q, V, B, G, L, R, S, and C 
I 0 
2 
5 


has already been assumed to be Ep 
If We ..tn<l Qe=Ep, tl,en one E.hould he able to d1stmgmsh the 


vowels from the conson•mts among the letters M, Q, V, B, G, L, R, S, and C by exammmg the 
2 
5 
prefixes of We, and the suffi.11.es of Q0 
The prefo.eE> and suflb..es of these letters, as shown by the 


trihteral frequenry distnbuhons, are these 


2 
2 
Prefixes of W 
0 (=Ep) 


5 
5 
Suffixes of Qa ( =Ep) 


QGKVRBIL 


.._ ~ :::: - ...... ::::: ...... -... 
....... 
I Q R X L V A Z 0 


1 
2 
5 


j Consider now the letter Mc, it does not occur either as a prefix of W01 or as a suffix of Q0 


2-...._::::-::::--- 


Hence it is most probably a VO\\'el, and on account of its lugh fiequency it may be assumed to 
1 
2 
be Op 
On the other hand, note that Q0 orcurs five tunes as a piefix of Wa and tbree tunes as 
5 
a suffix of Q0 
It 1s therefore a consonant, most probably Rp, for it would give the digraph 


51 
12 
ER (=QQ0 ) as ocwrrmg three times and RE (=QWe) as occurrmg five tunes 
1 
2 
5 


g The letter V 0 occurs three times as a prefix of We and twice as a suffix of Q0 


fore a consonant, and on account of its frequency, let 1t be assumed to be Tp 


It is there- 
1 
The letter B, 


2 
5 


occurs twice as a prefix of W0 but not as a suflh: of Q0 
Its frequency 1s only medmm, and it is 


1 2 
probably a consonant 
In fact, the t\\'ice repeated digiaph BW0 is once a part of the tr1graph 


5 1 2 
5 
GBW, u.nd Ge, the letter of second lnghest frequency m Alphi..bet 5, looks excellent for TP 
Might 
51 ..! 


not the tngraph GBW be THE? lt \Hll be "'ell to keep this possibility m mmd 


1 
2 
5 


h The lottei G0 occurs only once as a piefix of W 
0 and doec:i not occur as a suffix of Q0 It may 


1 
2 
be a vowel, but one can not be sure The letter L0 occurs once as a p1efix of W0 and once as a 
5 
1 
2 


suffi.ic of Q 
0 It may be conSidered to be n consonant 
Re occurs once as a prefix of W 
01 and twice 
5 
1 
1 


as a suffix of Q 
01 and is certamly a conE>onant 
Neither the lette1 S 0 nor the letter C 0 occurs as a 


2 
5 
prefix of W 
0 or as a suffr\. of Q01 both would seem to be vo"'els, but a study of the prefixes and 


1 
1 


suffi11.0s of these letters lends more "eight to the as<mmpt10n th11t C0 is •1 vowel than that S0 is a 


5 
5 
5 
vowel For all the prcfixeb of C, vu, N, T, und W, arn m c:iubsequent analysis of .Alphabet 5 clasSl- 


:fied as consonants, as are hke\\1~ itE> E.uflnrb, viz, T, C, a.nd B m Alphabet 2 On the other hand, 


5 
2 
1 
only one piefi-.c, L 
01 and one suffi.11.1 B01 of S 0 are later claE>bihed as consonants Smee vowels are 
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1 
more often associated with consonants than with other vowels, it would seem that C0 is more 
1 
1 
1 
hkely to be a vowel than S0 
At any rate C0 is assumed to be a vowel, for the present, leavmg s. 


unclaSSified 


i 
Gomg through the same steps with the remammg alphabets, the following results are 
ob tamed 


Alphabet 
Conson~nts 
Vowels 


1 
Q, v, B, L, R, G? 
I, M, c 
2 
B, c, D, T 
w, P, I 
3 
J, N, D, Y, F 
G, z 
4 
Y, z. J 
Q 
c. E?, R?, B? 


5 
G, N, A, I, w, L, T 
Q, u 


20 Apphcation of prmc1ples of direct symmetry of position -a The next step is to try 
to deterrmne a few values m ea.ch alphabet In Alphabet 1, from the foregomg analySis, the 
follo\\mg data a.re on hand 
Plam -------- 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
Cipher______ 
C9 
I 
C9 
M 
Q 
V 


Let the values of Ep already assumed m the remammg alphabets, be set down m a reconstruction 
skeleton, a.s follows 


Pla.m. --·------ _ ___I A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
~======================= I= 
L _ _ 
_ C9 
I 
C9 
M 
Q 
V 
----------------------------- 
2 _________ - 
w 
,__ ________________________ ,_ 
Cipher 3 _________ _ 
G 
,___ ________________________ _ 


4 _____ ----- 
c 
,__ ________________________ ,_ 


5_ • - - 
- 
Q 


FIGURE 10 


b It 18 seen that by good fortune the letter Q is common to Alphabets 1 and 5, and the 
letter C ic; common to Alphabets 1 and 4 If It IS assumed that one is dealmg with a case m which 
a mixed component is shdmg against the normal component, one can apply the pnnc1ples of 
direct symmetry of poSit1on to these alphabets, as outlined m Par 18 
For example, one may 


msert the followmg values m Alphabet 5 


Plam _ . ____ _ __ - A B c D E F G H I J K L M N 0 
p~ 


R s T 


u~ 


w x y z 
= 
C9 
I 
C9 
M 
Q 
v 


M 
Q 
v 
C9 
I 
{ 
L_ --- 


Cipher 5 ·-·-·---- 


FIGURE 11 
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li 
li 
li 


c The process at once gives three defimte values Mo=Bp, Vc=Gp, Io=Ri. 
Let these de- 


duced values be substantiated by referrmg to the frequency distnbution 
Smee B and G are 


normally low or medmm frequency letters m plam text, one should find that Mc and V c1 their 


hypothetical eqmvalents m Alphabet 5, should have low frequencies 
As a matte1 of fact, they 


do not appear m this alphabet, which thus far corroborates the assumption 
On the other hand, 


li 
5 
smce I.=Rp, if the values denved from symmetry of posit10n a.re correct, I. should be of high 


frequency, and reference to the distnbut10n shows that I 0 is of high frequency 
The position of 


C is doubtful, it belongs either under Np or VP 
If the former 18 correct, then the frequency 
5 
of C0 should be high, for it \\ould equal NP, if the latter is correct, then its frequency should be 
5 
low, for 1t would equal v. 
As a matter of fact, C0 does not occur, and it must be concluded 
1 
that it belongs under VP 
This m turn settles the value of c., for it must now be placed defirutely 


under Ip and removed from beneath Ap 


d The defimte placement of C now permits the msertion of new values m Alphabet 4, and 
one now has the f ollowmg 


P~m ________ -~~B~C~D~E~F~G~H~I~J~K~,-L~M~NTO~P~Q~R~~-S~TTU~V~,W~X~Y~Z 


i___ 
___ 
I 
C 
M 
Qr V 
,___ ___ ,__ ______ 
,___ ____ ,___.__ ___ .__,__ __ 


Cipher 3_________ 
G 


,__----------~----i---'-----i--'---i-- 


4_______ _ I 
C 
M 
Q 
V 
,__ __________ 
,__ ____ ,__ _____ ,__ __ ,__ 


5 _______ . 
M 
Q 
V 
I I 
C 
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21 Subsequent steps m solution -a It is high trme that the thus far deduced values, as 


Iecorded m the reconstruction skeleton, be mserted m the cipheI text, for by this time it must seem 
that the analysis has certamly gone too far upon unproved hypotheses 
The folloWIDg results 
are obta.med 
MESSAGE 


A 


1 
2 
3 
4. 
5 
Q W B R I 
VWYCA 
ISP J L 
RB Z E Y 
QWYEU 


RE 
R 
TE 
E 
E 
RE 


B 
L WM G W 
I CJ C I 
MT Z EI 
MI BK N 
Q W BR I 


E 
E 
ER 
0 
R 
0 
RE 
R 


c 
V WY I G 
B W NB Q 
QC G Q H 
I W J KA 
GEGXN 
u_ A 
E 
E 
R 
EN 
EE 
E 
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D 
ID MR U 
VE Z Y G 
Q I G V N 
C T G Y 0 
BP DBL 
E 
T 
R 
E p 
I 
E 


E 
V CG X G 
BK Z Z G 
I V X C U 
NT Z A 0 
B W FE Q 
T 
E 
E 
E 
E 
E 


F 
Q L F C 0 
MT Y Z T 
CC BY Q 
0 P D K A 
G D G I G 
R 
E 
0 
I 
E 
EA 


G 
VPWMR 
Q I I E W 
IC G X G 
BL G Q Q 
VB GR S 


T 
K 
R 
E 
E 
ENE 
T 
E 


H 
MYJJY 
Q VFW Y 
R W NFL 
G X NF W 
MC J K X 


0 
R 
E 
0 


J 
ID DRU 
0 p J Q Q 
ZR H C N 
V W DY Q 
RD GD G 
E 
NE 
E 
TE 
E 
E 


K 
BX DB N 
PX F PU 
Y X NF G 
MP J EL 
SAN CD 


0 
E 


L 
S E Z Z G 
I B E Y U 
K D H C A 
MB J J F 
K I L C J 
E 
E 
0 
E 


M 
MFDZT 
CT JR D 
M I Y Z Q 
AC JR R 
SB G ZN 
0 
I 
0 
E 
E 


N 
Q YA HQ 
V E D C Q 
L X N C L 
L V V C S 
Q W B I I 
R 
E 
T 
EE 
E 
E 
RE 
AR 


p 
IV JR N 
W NB RI 
VP J EL 
TAG D N 
I R G Q P 
~ 
R 
T 
E 
E 
EN 


Q 
AT YEW 
CB Y Z T 
EV G Q U 
VP Y H L 
LR ZN Q 
I 
EN 
T 
E 


R 
XI NB A 
I KW J Q 
RD Z Y F 
KW F Z L 
G W F J Q 
E 
E 
E 
E 
E 


s 
Q w J y Q 
I B WR X 
RE 
E 
E 
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b The combmations given are excellent throughout and no mconsir;;tencies appear 
Note 
1 2 3 
the tngraph QVvB, which is repeated m the follo\\-mg polygraphs (nnderlmecl m the foregomg text) 


1 
2 
3 
4 
5 
1 
Q W B R I 
V 


R E 
R T 


5 
1 
2 
3 
4 
5 
1 


S 
Q W B 
I 
I 
I 
R E 
A R E 


3 
c The letter B0 lB common to both polygraphs, and a httle imagination will lead to the 
3 


assumption of the value Ba=Pp, yieldmg the followmg 


1 
2 
8 
4 
5 
1 
Q W B R I 
V 


R 
E 
P 
0 
R 
T 


5123451 
S Q W B I 
I 
I 


P R E P A R E 


451234 
d Note also (m F5) the polygraph I G V P W M, which looks hke the word ATTACK 
The 
A 
T 
K 


5 
2 


frequency distnbutlons are consulted to see whether the frequencies given for G, and P 0 are lugh 
3 
enough for TP and Ap, respectively, and also whether the frequency of W0 is good enough for Cp, 


51 
it lB noted that they are excellent 
Moreover, the digraph GB11 which occurs four times, looks 
1 
hke TH, thus makmg B0=Hp 
Does the insertion of these four new values m our diagram of 
2 
1 


alphabets brmg forth any inconsistencies? The msert10n of the value P0=AP and B0=HP gives 


no mdtcations mthei \\-ay, smce neither letter has yet been located many of the other alphabets 


5 
The msertion of the value G0=Tp gives e. value common to Alphabets 3 .md 5, foi the value 


3 G,=Ep was assumed long ago 
Unfortunately an inconsistency is found here 
The letter I 


has been placed two letters to the left of Gm the rmxed component, and has given good results 
3 
in Alphabets 1 and 5, if the value W0=Cp (obte.med above from the assumption of the word 


ATTACK) lB conect, then W, and not I, should be the second letter to the left of G 
Which shall 
3 
be rate.med? There has been so far nothing to llste.bhsh tlie value of G0=Ep, this value was 
assumed from frequency considerations solely 
Perhaps it is wrong It certe.mly behaves hke 


a vowel, and one may see what happens when one changes its value to Op 
The followmg 
placements m the reconstruction skeleton result from the e.nalyslB, when only two or three new 
values have been added e.s a result of the clues afforded by the deductions 


A B c D E F G H I J\K L M N 0 p Q R s T u v w x y z 


I== 
= 
= 
Plam ______________ _ 


s 
I 
G B c 
M 
p Q R v w 
,_ - - - - - - - - - - - - - - - - - - - - - - ,_ - ·- 
p Q R v w 
s 
I 
G B c 
M 


,_ - 
- 
- 
- - - 
- 
- - - - - - - - - 
- - - - ,_ ,_ - 
- 
,___ 


rL-------- 
2 ________ _ 


R v w 
s 
I 
G B c 
M 
p Q 
- - 
- 
- 
- 
- 
- - ,_ - 
- 
- - 
- 
- - 
- 
- - - - 
- 
- 
- - 
- 
Cipher 3 _______ _ 


4 _________ _ I 
G B c 
M 
p Q R v w 
s 


'--- - 
- 
- 
- 
- 
- 
- - - - 
- 
- - 
- 
- 
- - - - - 
- 
- - ,_ 


5 --------- 
M 
p Q R v w 
s 
I 
G B c 


JIGUH 1311 
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e Many new values are produced, .i.nd these are lll'>erted throughout the message y1eldmg 
the followmg 
' 


1 
2 
3 
4 
5 
A 
Q W B R I 
V W Y C A 
I S P J L 
R B Z E Y 
Q W y E U 


REPOR 
TE 
E 
EMY 
SR 
RE 


B 
L W M G W 
I C J C I 
M T Z E I 
EWCH 
ES 
ER 
0 
R 


C 
VWYIG 
TE 
AT 


D 
IDMRU 
E 
W 0 


E 
V C G X G 
T S 0 
T 


F 
Q L F C 0 
R 
E 


G 
VPWMR 
TACK F 


H 
MYJJY 
0 


J 
I D 0 R U 
E 
0 


K. 
B X D B N 
H 
D 


L. 
S E Z Z G 
C 
T 


M. 
M F D Z T 
0 


N 
QYAHQ 
R 
E 


P. 
I V J R N 
E D 
0 


Q 
ATYEW 
H 


R. 
X I N B A 


0 
D 


S 
QWJYQ 
RE 
E 


B W N B Q 
HE 
DE 


VE Z Y G 
T 
T 


BK Z Z G 
H 
T 


MT Y Z T 
0 


Q I I E W 
R 0 M 
H 


Q VFW Y 
RD 
Q 


0 p J Q Q 
A 
NE 


PX F PU 
Q 
M 


I B E Y U 
ER 


CT JR D 
I 
0 


V E D C Q 
T 
EE 


W NB RI 
U 
P 0 R 


C B Y Z T 
I R 


I K W J Q 
E 
E 


I B WR X 
ER 
0 


QC G Q H 
R S 0 N 


QI G V N 
R 0 0 P 


I V X C U 
ED 
E 


CC BY Q 
I S P 
E 


I C G X G 
E S 0 
T 


R W NFL 
S E 


ZR H C N 


C 
E 


Y X NF G 
T 


K DH CA 


E 


M I Y Z Q 
0 0 
E 


L X NC L 
E 


VP J EL 
TA 


EV G Q U 
D 0 N 


RD Z Y F 
s 


M I B K N 
Q W B R I 


0 0 P 
R E P 0 R 


I W J KA 
E E 


C T G Y 0 
I 
0 


NT Z A 0 


0 PD KA 
A 


BL G Q Q 
H 
0 NE 


G X NF W 
G 
H 


V W DY Q 
TE 
E 


MP J EL 
0 A 


MB J J F 
0 R 


AC JR R 


S 
0 F 


L V V C S 


D B E P 


TAG D N 


0 


VP Y H L 
TA 


KW F Z L 
E 


GE G X N 
G 
0 


B P D B L 
HA 
D 


B W FE Q 
HE 
E 


G D G I G 
G 
0 A T 


VB GR S 
TR 0 0 P 


M C J K X 
0 s 


RD GD G 
S 
0 
T 


SAN CD 
C 
E 


K I L C J 


0 
E 


SB G ZN 
C R 0 


Q W B I I 
REP AR 


I R G Q P 
E C 0 N D 


LR ZN Q 


C 
E 


G W F J Q 
GE 
E 
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22 Completing the solution -a Completion of solution is now a very easy matt01 


The rmxed component is finally found to be the following sequence, based upon the word 
EXHAUSTING 


E X H A U S T I N G B C D F J K L M 0 P Q R V W Y Z 


and the completely reconstructed skeleton of the cipher square IS shown m Fig 13b 


Plam_ ----- 
____ _ A B c D E F G H I 
J K L M N 0 p Q R s T u v w 
- - 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- - 
- 
- - - - - 
- 
- 
- 
A u s T I 
N G B c D F J K L M 0 p Q R v w y z 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- - - - - 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- p Q R v w y z E x H A u s T I 
N G B c D F J K 


(!_ ___ _ 


2 ____ _ 


- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
Cipher___ 3 ___ _ - R v w y z E x H A u s T I 
N G B c D F J K L M 
- 
- 
- 
- 
>----- - - 
- - - - - - 
- 
- 
- 
- 
- 
- 
- 
- 
- 
4 - - 
I 
N G B c D F J K L M 0 p Q R v w y z E x H A 
- 
- 
- 
- 
- 
- - 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
5 ____ _ - L M 0 p Q R v w y z E x H A u s T I 
N G B c D 


F!GURB 136 


x y z 
- - 
- 
E x H 
- 
- 
- 
L M 0 
- 
- - 


0 p Q 
- - - 
u s T 
- 
- 
- 
F J K 


b Note that the ~uccesSivc eqmvalents of AP spell the word APRIL, winch Is the key for the 
message 
The plam-text message is as folio\\ s 


REPORTED ENEMY HAS RETIRED TO NEWCHESTER 
ONE TROOP IS REPORTED AT HEN- 


DERSON MEETING HOUSE 
TWO OTHER TROOPS IN ORCHARD AT SOUTHWEST EDGE OF NEW- 


CHESTER 
2D SQ IS PREPARING TO ATTACK FROM THE SOUTH 
ONE TROOP OF 3D SQ IS 


ENGAGING HOSTILE TROOP AT NEWCHESTER 
REST OF 3D SQ IS MOVING TO ATTACK 


NEWCHESTER FROM THE NORTH 
MOVE YOUR SQ INTO WOODS EAST OF CROSSROAD 539 AND 
BE PREPARED TO SUPPORT ATTACK OF 2D AND 3D SQ 
DO NOT ADVANCE BEYOND NEWCHESTER 


MESSAGES HERE 
TREER, 


COL 


c The precedmg case is a good example of the value of the prmc1ples of direct symmetry 
of poSition when apphed properly to a cryptogram enciphered by the shdmg of a mIXed com- 
ponent agamst the normal 
The cryptanalyst starts off with only a very hmited number of 
assumptions and builds up many new values as a result of the placement of the few ongmal 
values m the reconstruction skeleton 


23 Solution of subsequent messages enciphered by the same cipher component -a 


Preliminary remarks-Let 1t be supposed that the correspondents are uSlllg the same basic or 
pnmary component but with different key words for other messages 
Can the knowledge of 
the sequence of letters m the reconstructed pnmary component be used to solve the subsequent 
messages? It has been shown that m the case of a monoalphabet1c cipher m which a IDIXed 
alphabet was used, the process of completmg the plam component could be apphed to solve 
subsequent messages m winch the same cipher component was used, even though the cipher 
component was set at a different key letter 
A modificat1on of the procedure used m that case 


can be used m this case, where a plurality of cipher alphabets based upon a shdmg pnmary 
component 18 used. 
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b The message -Let it be supposed that the followmg message pas'llng between the same 
two correspondE'nts as m the precedmg message has been mtercepted 


MESSAGE 


SFDZR 
YRRKX 
MIWLL 
AQRLU 
RQFRT 
IJQKF 
XUWBS 
MDJZK 


MICQC 
UDPTV 
TYRNH 
TR ORV 
BQLTI 
QBNPR 
RTUHD 
PT IVE 


RMGQN 
LRATQ 
PLUKR 
KGRZF 
JCMGP 
IHSMR 
GQRFX 
BCABA 


OEMTL 
PCXJM 
RGQSZ 
VB 


c Factoring and conversion into p'lain component equivalents-The presence of a repet1t10n 


of a four-letter polygraph whose mterval is 21 letters suggests a key word of seven letters 
There 
are very few otl.er repet1t10ns, and this is to be expected m a short message with a key of such 
length 


1 
2 
3 4 
6 
6 
7 
SFDZRYR 
RKXMIWL 
LAQRLUR 
QFRTIJQ 
KFXUWBS 
MDJZKMI 
C Q C U D P T 
VTYRNHT 
RORVBQL 
T I Q B N P R 
RTUHDPT 
IVERMGQ 
NLRATQP 
LUKRKGR 
ZFJCMGP 
IHSMRGQ 
RFXBCAB 
AOEMTLP 
CXJMRGQ 
S Z VB 


FIGVBE 14 


d Transcription into periods -Let the message 
be wntten m groups of seven letters, m columnar 
fashion, as shown m Fig 14 
The letters ID each 
column belong to a smgle alphabet 
Let the letters 


ID each column be converted mto their plain-com- 
ponent equivalents by settmg the reconstructed 
cipher component agamst the normal alphabet at any 
arb1tranly selected pomt, for example, that shown 
below 


l 
2 3 
4 
6 6 
7 


FNMZVYV 
VPBRHXQ 
QDUVQEV 
UNVGHOU 
PNBEXKF 
RMOZPRH 
LULEMTG 
W G Y V I C G 
VSVWKUQ 
G H U K I T V 
VGECMTG 
HWAVRJU 
IQVDGUT 
QEPVPJV 
ZNOLRJT 
HCFRVJU 
VNBKLDK 
DSARGQT 
LBORVJU 
F Z WK 


FIGURE 16 


Plam__________ A B C D E F G H I J K L M N 0 P Q R S T U V W X Y z 
Cipher _______ E X H A U S T I N G B C D F J K L M 0 P Q R V W Y z 


The columns of eqmvalents are now as shown m Fig 15 
e Examination and selection of generatrices-It has been shown that m the case of a mono- 


alphabetic cipher it was merely necessary to complete the norm.al alphabet sequence beneath 
the plam-comronent eqmvalents and the plam text all reappeared on one generatnx It was 
also found that m the case of a multiple-alphabet cipher mvolvmg standard alphabets, the plam- 
text eqmvalents of each alphabet reappeared on the same generatnx, and it was necessary only 
to combme the proper generatnces m order to produce the plam text of the message In the 
case at hand both processes are combmed the normal alphabet sequence is contmued beneath 
the letters of each column and then the generatnces are combmed to produce the plam text 
The completely developed generatnx diagrams for the first two columns are as follows (Fig 16) 


1 
2 
c 0 
s Q 
NE 
R 0 
M 0 
0 N 
I V 
TH 
S T 
D I 
SH 
EX 
FR 
NF 
w 0 
ED 
s 0 
AT 
I C 
CA 


Oot.17K'f 1 


FVQUPRLWVGVHIQZHVDLF 


1 GWRVQSMXWHWIJRAIWEMG 
2 HXSWRTNYXIXJKSBJXFNH 
3 IYTXSUOZYJYKLTCKYGOI 
4 JzuyTVPAZKZLMUDLZHPJ 
5 KAVZUWQBALAMNVEMAIQK 
6 LBWAVXRCBMBNOWFNBJRL 
7 MCXBWYSDCNCOPXGOCKSM 
8 NDYCXZTEDODPQYHPDLTN 
9 OEZDYAUFEPEQRZIQEMUO 
10 PFAEZBVGFQFRSAJRFNVP 
11 QGBFACWHGRGSTBKSGOWQ 
12 RHCGBDXIHSHTUCLTHPXR 
13 SIDHCEYJITIUVDMUIQYS 
14 TJEIDFZKJUJVWENVJRZT 
15 UKFJEGALKVKWXFOWKSAU 
16 VLGKFHBMLWLXYGPXLTBV 
17 WMHLGICNMXMYZHQYMUCW 
18 XNIMHJDONYNZAIRZNVDX 
19 YOJNIKEPOZOABJSAOWEY 
20 ZPKOJLFQPAPBCKTBPXFZ 
21 AQLPKMGRQBQCDLUCQYGA 
22 BRMQLNHSRCRDEMVDRZHB 
23 CSNRMOITSDSEFNWESAIC 
24 DTOSNPJUTETFGOXFTBJD 
25 EUPTOQKVUFUGHPYGUCKE 
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OOLUJl'lll' 2 
NPDNNMUGSHGWQENCNSBZ 


1 OQEOONVHTIHXRFODOTCA 
2 PRFPPOWIUJIYSGPEPUDB 
3 QSGQQPXJVKJZTHQFQVEC 
4 RTHRRQYKWLKAUIRGRWFD 
5 SUISSRZLXMLBVJSHSXGE 
6 TVJTTSAMYNMCWKTITYHF 
7 UWKUUTBNZONDXLUJUZIG 
8 VXLVVUCOAPOEYMVKVAJH 
9 WYMWWVDPBQPFZNWLWBKI 
10 XZNXXWEQCRQGAOXMXCLJ 
11 YAOYYXFRDSRHBPYNYDMK 
12 ZBPZZYGSETSICQZOZENL 
13 ACQAAZHTFUTJDRAPAFOM 
14 BDRBBAIUGVUKESBQBGPN 
15 CESCCBJVHWVLFTCRCHQO 
16 DFTDDCKWIXWMGUDSDIRP 
17 EGUEEDLXJYXNHVETEJSQ 
18 FHVFFEMYKZYOIWFUFKTR 
19 GIWGGFNZLAZPJXGVGLUS 
20 HJXHHGOAMBAQKYHWHMVT 
21 IKYIIHPBNCBRLZIXINWU 
22 JLZJJIQCODCSMAJYJOXV 
23 KMAKKJRDPEDTNBKZKPYW 
24 LNBLLKSEQFEUOCLALQZX 
25 MOCMMLTFRGFVPDMBMRAY 


j Combining the selected generatrices-After some expen- 


mentmg with these generatnces the 23d generatnx of Column 1 and 
the 1st of Column 2, which yield the digraphs shown m Fig 17a, 
are combmed 
The generatnces of the subsequent columns are 


exammed to select those which may be added to these already 
selected m order to butld up the plam text The results are shown 
m Fig 17 b This process is a very valuable aid m the solution of 
messages after the pnmary component has been recovered as a 
result of the longer and more detailed analysis of the frequency 
d1str1but1ons of the first message mtercepted 
Very often a short 
message can be solved m no other way than the one shown, 
if the pnmary component is completely known 


l 
2 a 4 s e 7 


C 0 F I R S T 
SQUADRO 
NENEMYT 
R 0 0 P D I S 
MOUNTED 
0 N H I L L F 
IVENINE 
THREEWE 
S T 0 F G 0 0 
DINTENT 
SHXLINE 
EXTENDS 
F R 0 M C 0 R 
N F I E L D T 
WOHUNDR 
EDYARDS 
S 0 U T H X I 
ATTACKR 
I C H A R D S 
C A P T 


g Recovery of the key-It may be of mterest to find the key 
word for the message 
Assummg that enc1phenng method num- 
ber 1 (see Par 7j, page 6) were known to be employed, all that 
is necessary is to set the rmxed component of the cipher alphabet 
underneath the plam component so as to p1oduce the cipher letter 
md1cated a~ the eqmvalent of any given plain-text letter m each 
of the alphabets For example, m the first alphabet it is noted that 
Cp=S0 
AdJust the two components under each other so as to 
bnng S of the cipher component beneath C of the plam component, 


:rions 1111 thus, 
l!'IOlJU lj/I 
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Plain ________ - ABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZ 
Cipher___ ___ 
EXHAUSTINGBCDFJKLMOPQRVWYZ 


It is noted that Ap=Ac 
Hence, the first letter of the key word to the message is A 
The 2d, 
3d, 4th, 
7th key letters are found m exactly the same manner, and the followmg is obtmned 


When C 0 F I R S T equals 


S F D Z R Y R then AP succesSively equals 
AZIMUTH 


24 Summation of relative frequencies as an aid to the selection of the correct generatnces - 
a In the foregomg example, under subparagraph j, there occurs this phrase "After some 
expenmentmg with these generatnces 
" By this was meant, of course, that the selection of 
the correct nntrnl pru.r of generatnces of plam-text equivalents 1S m this process a matter of tnal 
and error 
The test of "correctness" is '\\hether, when Juxtaposed, the two generatr1ces so 
selected yield "good" digraphs, that is, high-freq11ency digraphs such as occur m normal plam 
text In his early efforts the student may have some drlficulty m selectmg, merely by ocular 
exannnation, the most hkely generatnces to try 
There may be 111 each diagram several gen- 
eratnces which contam good assortments of high-frequency letters, and the number of tnals of 
combmations of generatnces may be qmte large 
Perhaps a Simple mathematical method may 
be of assistance m the process 
b Suppose, m Fig 16, that each letter were accompamed by a number which corresponds 
to its relative frequency m normal Enghsh telegraphic text 
Then, by addmg the numbers along 


each horizontal hne, the totals thus obtamed will serve as relative numenral measures of the 
frequency valuc'3 of the respective gencratn<'eS 
Theoreti<'ally, the generatnx with the greatest 
value will be the wrrect generatnx because its total will represent the sum of the mdividual 
values of the actual plamtext letters 
In a<.,tual practice, of course, the generatnx \\-Ith the 
greatest value may not be the correct one, but the correct one will certamly be among the three 
or four generatnC'es with the largest values 
Thus, the number of tnals may be greatly reduced, 


m the attempt to put together the correct generatnces 
c UBlilg the precedmg message as an example, note the respective generatnx values m Fig 


18 
The frequency values of the respective letters shown m the figure are based upon the normal 


distnbution for War Department telegraphic text (see Table 3, Appendix 1, Military Crypt- 
analysis, Part I) 


Generatrlx 
0 


1 


2 


3 


4 


5 


6 


7 


8 


9 


10 


11 


12 


13 


14 


15 


16 


17 


18 


19 


20 


21 


22 


23 


24 


25 


4:1 


CoLUM:N 1 


FVQUPRLWVGVHIQZHVDLF 
3 
2 o 3 
3 s 4 
2 
2 
2 
2 a 1 o o a 2 
' 
4 a 
GWRVQSMXWHWIJRAIWEMG 
2 
2 
8 
2 
0 
6 
2 
0 
2 s 
2 
7 
0 
8 
7 
7 
2 J3 
2 
2 


HXSWRTNYXIXJKSBJXFNH 
3 
0 
6 
2 
8 
9 
8 
2 
0 
7 
0 
0 
0 
6 
1 
0 
0 
3 
8 
3 
I Y T X S U 0 Z Y J Y K L T C K Y G 0 I 
7 
2 
9 
0 
6 
3 
8 
0 
J 
0 
2 
0 
' 
9 
3 
0 
2 
2 
8 
7 


JZUYTVPAZKZLMUDLZHPJ 
o o a 2 u 2 a 7 o o o ' 
2 a ' 
4 o a a o 


KAVZUWQBALAMNVEMAIQK 
O 7 
2 
O S 
2 
0 
1 
7 
4 
7 
2 
8 
2 IS 
2 
7 
7 
0 
0 
LBWAVXRCBMBNOWFNBJRL 
4 
1 
2 
7 
2 
0 
8 
8 
1 
2 
1 8 
8 
2 
8 
8 
1 
0 
8 
4 
MCXBWYSDCNCOPXGOCKSM 
2 a o 1 
2 
2 s 4 a 8 a a 3 o 2 s a o 6 
2 


NDYCXZTEDODPQYHPDLTN 
8 
4 
2 
3 
0 
0 9184 8 
4 
8 
0 
2 
3 
3 4' 118 
OEZDYAUFEPEQRZIQEMUO 
8 13 0 
' 
2 
7 
3 
3 J3 3 J3 
0 
8 
0 
7 
0 13 
2 
3 
8 


PFAEZBVGFQFRSAJRFNVP 
a a 1 13 o 1 
2 
2 a o a 8 e 7 o 8 a s 2 a 


QGBFACWHGRGSTBKSGOWQ 
0 
2 
1 
3 
7 s 
2 s 
2 
8 
2 
6 
9 
1 
0 
6 
2 
8 
' 
0 
RHCGBDXIHSHTUCLTHPXR 
s a a 2 
1 
' 
o 1 a 6 s t a s ' 
t a a o 8 


S I D H C E Y J I T I U V D M U I Q Y S 
674381320797324237026 
TJEIDFZKJUJVWENVJRZT 
u o 13 
7 4 a o o o a o 2 
2 J3 s 2 o 8 o e 
UKFJEGALKVKWXFOWKSAU 
a o a 0182 7 
4 o 2 o 2 o as z o e 7 a 


VLGKFHBMLWLXYGPXLTBV 
2 
4 
2 
0 
3 
3 
1 
2 
' 
2 
' 
0 
2 
2 
3 
0 
' 
9 
1 
2 


WMHLG IC NMXMYZHQYMU CW 
2 
2 
3 
4 
2 
7 
3 
8 
2 
0 
2 
2 
0 
3 
0 
2 
2 
3 
3 
2 


XNIMHJDONYNZAIRZNVDX 
o s 1 2 a o 4 s 8 
2 8 o 1 1 8 o 8 
2 
' 
o 
Y 0 J N I K E P 0 Z 0 A B J S A 0 W E Y 
2 
8 
0 
8 
7 
0 J3 3 
8 
0 
8 
7 
1 0 
8 
7 
8 
2 J3 2 
ZPKOJLFQPAPBCKTBPXFZ 
o a o s o ' a o a 1 a i 
a o 11 
1 a o a o 


AQLPKMGRQBQCDLUCQYGA 
1 o 4 a o 2 
2 s o 1 o a 4 
' 
a a o 2 
2 
1 
BRMQLNHSRCRDEMVDRZHB 
1820483118384132248031 
C S N R M 0 I T S D S E F N W E S A I C 
a s s s 2 s 1 e a 4 s 13 a s 2 13 a 1 1 a 
DTOSNPJUTETFGOXFTBJD 
' 
11 s e s a o a e J3 e s 2 s o a 11 
1 o 4 
EUPTOQKVUFUGHPYGUCKE 
13 a a u s o o 2 a a a 2 a a 2 
2 a a o J3 


Frequency 


value 


57 


77 


66 


74 


49 


74 


73 


66 


91 


110 


82 


67 


82 


90 


83 


65 


50 


52 


86 


103 


51 


55 


88 


129 


102 


78 
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COLUMN 2 


Genemtm: 
0 
NPDNNMUGSHGWQENCNSBZ 
83,882326322013888610 


1 
0 Q E 0 0 N V H T I H X R F 0 D 0 T C A 
8 0188 8 
8 
2 3 
8 
7 3 0 
8 
8 
8 '8 8 
8 
7 
2 
P R F P P 0 W I U J I Y S G P E P U D B 
a s a a a 8 
2 
7 
8 o 7 
2 
6 
2 
8 13 3 
a 
' 
1 
3 
Q S G Q Q P X J V K J Z T H Q F Q V E C 
O 6 
2 0 0 
3 0 
0 
2 0 
0 0 
D 3 
0 
3 0 
2 13 3 
4 
RTHRRQYKWLKAUIRGRWFD 
8 
u 
a 
8 
8 
o 
2 o 
2 4 
o 
7 a 
1 8 
2 8 
2 
a 
' 


5 
SUISSRZLXMLBVJSHSXGE 
6 8 
7 6 
8 8 
0 
' 
0 
2 
4 
1 
2 0 
8 
8 
8 
0 
2 u 


6 
TVJTTSAMYNMCWKTITYHF 
9 
2 0 9 
D B 7 
2 
2 8 
2 
8 
2 0 
8 
7 9 
2 
8 8 
7 
UWKUUTBNZONDXLUJUZIG 
8 
2 0 
8 
8 
9 
1 8 
0 
8 
8 
' 
0 
' 
8 
0 
8 
0 
7 
2 
8 
VXLVVUCOAPOEYMVKVAJH 
2 0 
' 
2 
2 
8 
8 8 
7 8 
8 18 2 
2 
2 0 
2 
7 0 
8 
9 
WYMWWVDPBQPFZNWLWBKI 
222222•a1oaao82•2101 
10 
X Z N X X W E Q C R Q G A 0 X M X C L J 
o 
o 8 
o 
o 
2 1a o 
a 
8 
o 
2 
1 
8 
o 
2 
o a 
' 
o 
11 
Y A 0 Y Y X F R D S R H B P Y N Y D M K 
2 
7 8 
2 
2 0 
8 8 
' 
6 8 
8 
1 
8 
2 8 
2 
4 
2 
0 


12 
Z B P Z Z Y G S E T S I C Q Z 0 Z E N L 
o 
1 
a 
o o 
2 
2 
e 18 u 
e 
1 
a 
o o 
8 
o u 8 
' 


13 
A C Q A A Z H T F U T J D R A P A F 0 M 
1 a o 1 1 o a u a a u o ' 
8 1 a 1 8 
8 
2 
14 
B D R B B A I U G V U K E S B Q B G P N 
148117732230138101288 


15 
C E S C C B J V H W V L F T C R C H Q 0 
a u e a a 1 o 2 8 
2 
2 ' 
a u a 8 a a o s 
16 
D F T D D C K W I X W M G U D S D I R P 
4 
B 8 
4 
4 
8 
0 
2 
7 0 
2 2 
2 3 
4 
6 
4 
7 8 
8 
17 
E GUE E D L X J Y X NH VE T E J S Q 
IB 2 3 18 U 4 4 
0 0 
2 0 
8 
3 
2 IB 9 U O 8 
O 


18 
F H V F F E M Y K Z Y 0 I W F U F K T R 
3 8 
2 8 
8 13 2 
2 0 0 
2 8 
7 
2 8 
8 
3 
0 9 
8 
19 
G I W G G F N Z L A Z P J X G V G L U S 
2 
7 
2 2 
2 8 
8 
0 
' 
7 0 
8 
0 0 
2 
2 
2 4 
8 
8 


20 
H J X H H G 0 A M B A Q K Y H W H M V T 
8 
0 0 
8 8 
2 
8 
7 
2 
1 
7 0 0 
2 
8 
2 
3 
2 
2 9 


21 
I K Y I I H P B N C B R L Z I X I N W U 
1 o 2 1 1 a a 1 8 a 1 s ' o 1 o 1 s 2 a 


22 
J L Z J J I Q C 0 D C S M A J Y J 0 X V 
0 
' 
0 
0 0 
7 0 3 
8 
' 
8 
8 
2 
7 0 
2 0 
8 
0 
J 


23 
K M A K K J R D P E D T N B K Z K P Y W 
0 
2 
7 0 0 
0 
8 
' 
8 u ' 
9 
8 
1 0 0 
0 
8 
2 
2 


24 
L N B L L K S E Q F E U 0 C L A L Q Z X 
' 
8 
l 
' 
4 
0 
8 18 0 
8 u 3 
8 
8 
' 
7 4 0 
0 
0 


25 
M 0 C M M L T F R G F V P D M B M R A Y 
2 s a a a ' u a a a a 2 a ' 
2 
1 
2 s 1 
2 
:rrovu 18 


Frequency 
value 
90 


119 


84 


40 


88 


79 


94 


68 


73 


50 


60 


75 


85 


93 


73 


79 


77 


108 


76 


59 


59 


81 


56 


66 


85 


77 


I 
L 
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d It will be noted that the frequency value of the 23d generatnx for the first column of 


cipher letters is the greatest, that of the first generatnx for the second column is the greatest 
In both cases these are the correct generatnces 
Thus the selection of the correct generatnces 


ID such cases has been reduced to a purely mathematical basis which lS at tunes of much asS1Stance 
m effectmg a qmck solution 
Moreover, an understandIDg of the prmc1ples IDvolved will be of 
considerable value ID subsequent work 


25 Solution by the probable-word method.-a Occasionally one ma.y encounter a crypto- 


gram which lS so short that it contaIDs no recurrences even of digraphs, and thus gives no mdi- 
cat1ons of the number of alphabets IDvolvC'd 
If the shdmg IDl.Xed component is kno\\n, one may 
apply the method illustrated ID Par 15, assunung the presence of a probable word, checkIDg 1t 
agamst the text and the shdmg components to establish a key, if the correspondents are usIDg 
key words 
b For example, suppose that the presence of the word ENEMY lS assumed ID the message 


ID Par 23b above 
One proceeds to check it agaIDst an 1IDknown key word, shdmg the already 
reconstructed mixed component agamst the normal and startIDg with the first letter of the 
cryptogram, ID th!S manner 
When ENEMY equals 
SFDZR then AP succesS1vely equals 
XENFW 


The sequence XENFW spells no IDtelligible word 
Therefore, the location of the assumed word 
ENEMY lS shifted one letter forward ID the cipher text, and the test lS made agam, Just as was 
explamed ID Par 15 
When the group AQRLU 1s tned, the key letters ZIMUT are obtaIDed, 


which, taken as a part of a word, suggests the word AZIMUTH 
The method must YJeld solution 


when the correct assumptions are made 
c The danger to cryptographic secunty resulting from the IDclus1on of cryptographed 
addresses and Signatures ID cryptographic messages becomes qmte obVIous ID the hght of 
solution by the probable-word method 
To illustrate, reference lS made to the message employed 


ID Pars 19-22 
It will be noted ID Par 22b that the message earned a signature (Treer, Col ) 
and that the latter was enciphered 
Suppose that this were an authonzed practice, and that 
every message could be assumed to conclude with a cryptographed Blgnature 
The signature 
"TREER COL" would at once afford a very good basis for the qmck solution of subsequent mes- 
sages emanatIDg from the same headquarters as did the first message, because presumably this 
same s1gnatme would appear ID other messages 
It 1S for this reason that addresses and signa- 


tures must not be cryptographed, if they must be mcluded they should be cryptographed ID a 
totally different systtim or by a wholly different method, perhaps by means of a special address 
and signature code 
It would be best, however, to ormt all addresses and signatures, and to 
let the call BlgnS of the headquarters concerned also convey these parts of the message, leavmg 
the dehvery to the addressee a matter for local action 


26 Solution when the plain component is a mixed sequence, the cipher component, the 
normal -a Th!S falls under Case B (2) outhned m Par 6 It is not the usual method of 
employmg a smgle mixed component, but may be encountered occas10nally m cipher deVIces 


b The prehmIDary steps, as regards facto1mg to determme the length of the penod, are 


the same as usual 
The message is then transcnbed mto its penods 
Frequency dlStnbutions 
are then made, as usual, and these are attacked by the prmc1ples of frequency and recurrence, 
An attempt is made to apply the pnnc1ples of direct symmetry of pos1t1on, but this attempt 
will be futile, for the reason that the plam component ism this case an unknown mIXed sequence 
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(See Par 18d ) .Any attempt to find symmetry m the secondary alphabets based upon the normal 
sequence can therefore disclose no symmetry because the symmetry winch exists 1s based upon a 
wholly different sequence 
c However, rl the principles of direct symmetry of position a1e of no avatl m tins case, 
there are ce1 tam other pnnciples of symmetry winch may be employed to great advantage 
To e'\.plam them an actual example will be used 
Let it be assumed that it 18 known to the 
cryptanalyst that the enemy 1s usmg the general system under discussion, viz, a mixed sequence, 
vanable from day to day, is used as plam component, the normal sequence 1s used as cipher 
component, and a repeatmg key, vanable f11 m message to message, 1s used m the ordmary 
manner 
The followmg message has been mtercepted 


1 
2 
a 
4 
s 
6 
A 
Q E 0 V K 
LRMLZ 
JV GT G 
NDLVK 
EVN TY 
ERMUE 


B 
V R Z M 0 
YA AMP 
DK EI J 
SF MY 0 
YHMME 
G QA MB 
c 
UQAXR 
HUFBU 
KQYMU 
NE L VT 
K Q I L E 
K Z BUE 


D 
UL I BK 
ND AX B 
XU D G L 
LADVK 
P 0 A Y 0 
DKKYK 
E 
LAD HY 
B V NF V 
U EE ME 
FF MT E 
G V W BY 
TV DZ L 
F 
S P B H B 
XV AZ C 
UDY U E 
LKMMA 
EU DD K 
NC F SH 


G 
HSAHY 
TM GU J 
HQ X PP 
DK 0 U E 
XU Q VB 
F V W BX 
H 
N X ALB 
TC D L M 
IV A A A 
N S Z I L 
0 v w v p 
YA G Z L 
J 
SHMME 
G Q DH 0 
Y HIV P 
NCR RE 
X K D Q Z 
GK NC G 
K 
NQGUY 
J I WY Y 
TMAHW 
XRLBL 
0 A D L G 
N Q GUY 


L 
JU U GB 
JHRVX 
ER FL E 
G W GUO 
XE DTP 
D K E I Z 
M 
VXNWA 
FA AN E 
MK G H B 
S S N L 0 
K JC B Z 
T G G L 0 


N 
PKMBX 
HGERY 
TM W L Z 
N QC Y Y 
T M W I P 
DKATE 
p 
FLNUJ 
ND TV X 
JR Z TL 
0 P A H C 
D F Z Y Y 
DEY CL 


Q 
GP GT Y 
T E C X B 
HQEBR 
KVWMU 
N I N G J 
I Q D L P 


R 
J KATE 
GUWBR 
HUQWM 
V R QB W 
YR F BF 
KMWMB 
s 
TM UL Z 
LAAHY 
JG D V K 
LKRRE 
X KN A 0 
ND SB X 
T 
X CG Z A 
HDGTL 
VKMBW 
IS AUE 
FD NW P 
NL Z I J 
v 
SR Q Z L 
AV NHL 
GVWVK 
F I G H P 
G E C Z U 
K QA P 


d A qtudy of the recurrences and factonng their mtervals discloses that five alphabets are 
mvolved 
Umhteral frequency distnhutions are made and are shown m Fig 19a 


ALPHABET 1 


::: 
::::: 
~ 
-~~ 
::::::::::::- 
~ 
~ 
~ 
~~~~~~~~~~~~~~ ~~~~ ~~ 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


ALPHABET 2 
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ALPHABET 3 


:::::: 
~ 
:::: 
:::::: 
~ 
~ 
~ 
~~ 
~ 
~::::::~~~~~ 
~ 
~~~~:::::: 
~~-~:::::: 
2~~~ 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


ALPHABET 4 


ALPHABET 5 
- 
~ 
~ 
if§ 
===~ 


~~:::::: 
~-~~ ~~~~ 
~~ 
~ 
~~-~~~~ 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


FIGVBJ: 19a 


e Smee the cipher component m tlus case is the normal alphabet, it follows that the five 
frequency distributions are based upon a sequence which is known, and therefore, the five frequency 
distributions should manifest a direct symmetry of distributwn of crests and troughs 
By virtue of 


tins symmetry and by sluftmg the five d1stnbutions relative to one another to proper supenm- 
poB1tions, the several distnbutions may be combmed mto a smgle uruhteral distnbution Note 
how tins slnfting has been done m the case of the five illustrative distnbutions 


ALPHABET 1 


;::: 
:::::: 
~ 
~~:::::: 
~::::::~ 
~ 
~ 
~- 
~~ 
~~~2~~~~~-~~::::::- 
~~~~ ~~ 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 


ALPHABET2 


~ 
:::: 
::::: 


:::::: 
:::::::::::: 
~ 
~~ 
~ 
~ 
~~ 
~~~~~~~~~~~ '~~~~ ~~­ 
XYZABCDEFGHIJKLMNOPQRSTUVW 


ALPHABET 3 


:::::: 
~ 
:::::: 
:::::: 
~ 
~ 
~ 
~ 
~~ 
-:::::: 
~~~~~===~~~~~ 
~ 
~~~~:::::: 
~~­ 
TUVWXYZABC DEFGHIJKLMNOPQRS 


ALPHABET4 
- 
~ 
~ 
~~~ 
~ 
~ 
~~ 
~~~~~~~~~~~~~~~ ~~~~ 
~~~ 
OPQRSTUVWXYZABCDEFGHIJKLMN 


ALPHABET 5 
- 
::::: 
~ 
~~ 
~ 
~ 
~~ 
~~ 
~ 
~~~~~~~~~~ ~~~~ ~~~~ ~~ 
RSTUVWXYZABCDEFGHIJKLMNOPQ 


FIGllBS 18/J 
111201&-88--4 


46 


j The superimposition of the respective distnbutions enables one to convert the cipher 


letters of the five alphabets mto one alphabet 
Suppose it lS decided to convert Alphabets 
2, 3, 4, and 5 mto Alphabet 1 It is merely necessary to substitute for the respective letters m 
the four alphabets those which stand above them m Alphabet 1 
For example, m Fig 19b, X, 


m Alphabet 2 is directly under A0 m Alphabet 1, hence, if the supenmpoS1tion is correct then 
2, 
1 
x, =A, 
Therefore, m the cryptogram it is merely necessary to replace every X0 m the second 


poBltion by A0 
Agam Ta m Alphabet 3 =A0 m Alphabet 1, therefore, m the cryptogram one 
replaces every T0 m the third pos1t1on by A0 
The entire process, heremafter deSignated as 
conversion into monoalphabetic terms, gives the followmg converted message 


1 


A 
QHVHT 


B 
VUGYX 
C 
UTHJA 


D 
UOPNT 


E 
LDKTH 
F 
SSITK 


G 
HVHTH 


H. 
NAHXK 
J. 
SK TY N 
K 
NTNGH 
L 
JXBSK 


M. 
VA U I J 
N 
PNTNG 


P. 
F 0 U GS 


Q 
GSNFH 


R 
JNHFN 


S 
TPBXI 


T 
XFNLJ 


V 
SUXLU 


2 
LU TX I 
YDHYY 
HXMND 
NGHJK 
BY URE 
XYHLL 
TPNGS 
TFKXV 
GTKTX 
JLDKH 
JKYHG 
FDHZN 
HJLDH 
NGAHG 
TH J J K 
GXDNA 
LDHTH 
HGNFU 
AYUTU 


8 


JYNFP 
DNLUS 
KT FY D 
XX KS U 
UHLYN 
U G F G N 
HTEBY 
IYHMJ 
YKPHY 
T PH T F 
EUMXN 
MNNTK 
T P D X I 
JUG FU 
HTLNA 
H XX IV 
J J K HT 
V NTN F 
GYDHT 


4 
NGSHT 
SIT K X 
NHS H C 
LDKHT 
FIT F N 
LNTYJ 
DNVGN 
NVGUU 
NFYDN 
XUSNU 
GZNGX 
svuxx 
NTJKH 
0 SH TL 
KYDYD 
VUXNF 
LNYDN 
IV HG N 
FLNTY 


II 
EYUFH 
YKTYN 
KTPXN 
PRHKX 
GYDNH 
EXKPT 
XXXHK 
OYDHY 
X N KC I 
0 DK X P 
XHKFY 
KM JN I 
TPDUY 
DIGKH 
NL USS 
YUM N 0 
XNUMX 
F GU I Y 
GHJLD 


8 
EUTGN 
GTHYK 
KC I G N 
DNRKT 
TYKLU 
NFMEQ 
FYDNG 
YDNLU 
GNU 0 P 
NTNGH 
DNLUI 
TJNXX 
DNHFN 
DHFOU 
ITKXY 
KPDYK 
NGZNG 
N 0 GUS 
KTHB 


The umhteral frequency distribution for this converted text follows Note that the frequency 
of each letter 18 the sum of the five frequencies m the corresponding columns of Fig 19b 


:::::: 
::::: 
~ 
~ 
§§ 
~ 


~ 
~ 
~ 
~ 
~ 
~ 
~~ 
~ 
~ 
~~ 
~ 
- 
~~ 
~ 
~ 
~~ 
~~ 
~ 
~~~ 
~ 
~ 
~~ 
~~ 
~ 
~g~ _g::::: 
~ 
~~ 
~~ 
~ 
~g~~~~~ 
~ 
§§~~ 
~~ 
~ 
~g~~~~~ 
~ 
~ 
~~~::::: 
~~ 


~ 
~~~~~~~~~~~~~ 
~~~~ ~~ 
~~~~g~~~~~~~~g~~:::::~~~~~ 
~~~ 


ABC DEFGHIJKLMNOPQRSTUVWXYZ 
7 
11 a u 7 • 
M M 
~ ~ ~ D s m u u 2 a w " ~ a 
u n a 


Flot7U20 
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g The problem havmg been reduced to monoalphabet1c terms, a tnhteral frequency distn- 
bution can now be made and solution readily attamed by Simple pnnc1ples 
It yields the 
followmg 


JAPAN CONSULTED GERMANY TODAY ON REPORTS THAT THE COMMUNIST INTERNATIONAL 


WAS BEHIND THE AMAZING SEIZURE OF GENERALISSIMO CHIANG KAI SHEK IN CHINA 
TOKYO ACTED UNDER THE ANTICOMMUNIST ACCORD RECENTLY SIGNED BY JAPAN AND GER- 
MANY 
THE PRESS SAID THERE WAS INDISPUTABLE PROOF THAT THE COMINTERN INSTI- 


GATED THE SEIZURE OF GENERAL CHIANG AND SOME OF HIS GENERALS 
MILITARY OB- 
SERVERS SAID THE COUP WOULD HAVE BEEN IMPOSSIBLE UNLESS GENERAL CHANG HSUEN 
LIANG HOTHEADED FORMER WAR LORD OF MANCHURIA HAD FORMED AN ALLIANCE WITH THE 
COMMUNIST LEADERS HE WAS SUPPOSED TO BE FIGHTING 
SUCH AN ALLIANCE THESE 
OBSERVERS DECLARED OPENED UP A RED ROUTE FROM MOSCOW TO NORTH AND CENTRAL 
CHINA 


h The rec,onstruction of the plam component 18 now a very sm1ple matter It lS found to 
be as follows 


HYDRAULICBEFGJKMNOPQSTVWXZ 


Note also, m Fig 19b, the keyword for the message, (HEAVY), the letters bemg m the columns 
headed by the letter H 


i The solution of subsequent messages with different keys can now be reached duectly, by 


a sunple modrli.cation of the prmc1ples explamed m Par 18 
This modrlicat1on consists m usmg 


for the completion sequence the mixed plain component (now known) mstead of the normal alpha- 
bet, after the cipher letters have been converted mto their plam-component eqmvalents 
Let 
the student confirm this by experrment 


:J The probable-word method of solution discusbed under Paragraph 20 is also apphcable 
here, m case of very short cryptograms 
This method presupposes of course, possesSion of the 


mixed component and the procedme is essentially the same as that m Par 20 
In the example 


discussed m the present paragraph, the letter A on the plam component was succesSively set 
agamst the key letters HEAVY, but this is not the only possible procedure 
k The student should go ove1 carefully the prmc1ple of "conversion mto monoalphabetic 
terms" explumed m subpaiagraphf above until he thoroughly understands it 
Later on he will 


encounter cases m which this pnnC'1ple is of very great assistance m the cryptanalySis of more 
complex problems 
(Another example will be found under Par 45 ) 
l The prmc1ple illustrated m subparagraph e, that is, shiftmg two or more monoalphabct1c 
frequency distr1but1ons relatively '30 as to bnng them mto proper ahgnment for amalgamation 
mto a smgle monoalphabetic distr1buti.on, is called matching 
It is a very unportant crypt- 
analytic prmc1ple 
Note that its practical application consISts m sliding one monoalphabetic 
distribution agamst the other so as to obtam the best comc1dence between the entire sequence 
of crests and troughs of one d1stubut1on and the entire sequence of crests and troughs of the other 
dlStnbution 
When the best pomt of comc1dcnce has been found, the two sequences may be 
amalgamated and theoretically the smgle resultant distribution wtll also be monoalphabet1c m 
character 
The successful apphcat1on of the prmC'1ple of matchmg depends upon several factors 


First, the cryptographic SitUc1t1on must be such that matchmg is a cor1cct cryptographic step 
For example, the d1str1but1ons m bgure 19b are properly subject to matchmg because the cipher 
component m the basic sequences concerned m this problem 1s the normal sequence, while the 
plam component is a mixed sequence 
But it would be futile to t1y to match the d1sti.1but1ons 
m figure 9, form that case the cipher component is a nnxcd sequence, the plam component is 
the norm.al sequence 
Hence, no amount of sluftmg or matchmg can bnng the dtstnbut1ons of 
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figure 9 mto proper supenmpoSltion for correct amalgamation 
(If the occurrences m the various 
distnbutions in figure 9 had been distributed according to the sequence of letters m the mixed 
component, then matchmg would be possible, but in order to be able to distnbute these occur- 
rences according to the mixed component, the latter has to be known-and that is Just what is 
unknown unttl the problem has been solved ) A second factor mvolved m successful matching 
is the number of elements m the two distributions formmg the subject of the test If both 
of them have very few tallies, there lS hardly sufficient information to permit of matchmg with 
any degree of assurance that the work is not m vam 
If one of them has many tallies, the other 
only a few, the chances for success are better than before, because the positions of the blanks m 
the two distnbutions can be used as a gwde for their proper superimposition 


m There are certam mathematical and statistical procedures which can be brought to bear 
upon the matter of cryptanalytic matchmg 
These wtll be presented ma later text 
However, 


until the student has studied these mathematical and statistical methods of matchmg distn- 
butions, he will have to rely upon mere ocular examination as a guide to proper supenmposition 
Obviously, the more data he has m each distribution, the easier IS the correct supenmpoSit1on 
ascertamed by any method 


SECTION VI 


REPEATING-KEY SYSTEMS WITH MIXED CIPHER ALPHABETS, II 


Paragraph 


Further cases to be considered ------ ---------------------------------------------- ------------------------------- ------ ------ 
27 


Identical pnmary mixed components proceedrng m the same d1rect10n --------------------------------------------··· 28 
Cryptograph.J.ng and decryptograph.J.ng by means of identical pnmary IDl'-t'd components ---------------------·· 29 
Pnnc1ples of solution-----------------------------------------------------------------------------------------------·---···----------- 
30 
27. Further cases to be considered -a Thus far Cases B (1) and (2), mentioned m Para- 


graph 6 have been treated 
There remams Case B (3), and this case has been further subdivided 


as follows 
CABE B (3) Both components are IDlXed sequences 
(a) Components are identical IDIXed sequences 
(1) Sequences proceed m the same direction 
(The secondary alphabet are mrted 


alphabets) 
(2) Sequences proceed m opposite directions 
(The secondary alphabets are 
reciprocal IDIXed alphabets ) 
(b) Components are different IDlXed sequences 
(The secondary alphabets are m.ixed 


alphabets) 
b The first of the foregom~ su bcases wtll now be examined 
28 Identical primary mixed components proceedmg m the same direction -a It is often 


the case that the mixed components are derived from an easily remembered word or phrase, 
so that they can be reproduced at any trme from memory 
Thus, for example, given the key 
word QUESTIONABLY, the followmg mixed sequence is derived 
QUESTIONABLYCDFGHJKMPRVWXZ 


b By USlllg this sequence as both plam and cipher component, that is, by shding this 


sequence a.gamst itself, a senes of 26 secondary mixed alphabets may be produced 
In enmpher- 


mg a message, shchng strips may be employed with a key word to des~ate the particular and 
successive positions m which the strips are to be set, the same as was the case m previous examples 
of the use of shdmg components 
The method of designatmg the positions, however, reqmres 
a word or two of comment at this pomt 
In the examples thus far shown, the key letter, as 
located on the cipher component, was always set opposite A, as located on the plam component, 
possibly an erroneous rmpresSion has been created, mz, that this is mvanably the rule 
This 


IS decidedly not true, as has already been explamed m paragraph 7c If it has seemed to be the 
case that 0a.: always equals AP, it is only because the text has dealt thus far principally with cases m 
which the plam component is the normal sequence and its mhtal letter, which usually consti- 
tutes the mdex for JUXtaposmg cipher components, is A It must be emphasized, however, 
that vanous convent10ns may be adopted m this respect, but the most common of them is to 
employ the rmtial letter of the plam component as the mdex l('tter 
That is, the mdex letter, 


0 11 will be the rmt1al letter of the IDlXed sequence, in this case, Q 
Furthermore, to prevent the 


possibility of amb1gmty it wtll be stated agam that the pair of enc1phermg equations employed 
m the enswngdiscussion will be the first of the 12 set forth under Par 7J, mz, 0J3=0J1, 0p/1=0c/a 
In this case the subscript "1" means the plam component, the subscript "2", the cipher 
component, so that the enciphering equation is the followmg 0J0=0Jp, 0p/p=0./o 


(49) 
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c By settmg the two shdmg components agamst each other m the two positions shown 
below, the cipher alphabets labeled (1) and (2) given by two key letters, A and B, are seen to be 
different 


KEY LETTER=A 


Plam component ____________ _ 
Cipher component __________ _ 


Secondary alphabet (1) 


8, 
.j. 
QUESTIONABLYCDFGHJKMPRVWXZQUESTIONABLYCDFGHJKMPRVWXZ 
QUESTIONABLYCDFGHJKMPRVWXZ 


t 
811: 


Plam ____________ A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
Cipher __________ H J P R L V W X D Z Q K U G F E A S Y C B T I O M N 


KEY LETTER=B 


Plam component__ __________ _ 
Cipher component __________ _ 


Secondary alphabet (2) 


8, 
.j. 
QUESTIONABLYCDFGHJKMPRVWXZQUESTIONABLYCDFGHJKMPRVWXZ 
QUESTIONABLYCDFGHJKMPRVWXZ 


t 
811: 


Plam ------------ A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
Cipher __________ J K R V Y W X Z F Q U M E H G S B T C D L I O N P A 


d Very frequently a quadricular or square table is employed by the correspondents, illstead 
of shdmg strips, but the results are the same 
The cipher square based upon the "\\-Ord QUESTION- 
ABLY is shown m Fig 21 
It will be noted that it does nothmg more than set forth the successive 


posit10ns of the two primary shdmg components, the top lme of the square is the plam component, 
the successive horizontal hnes below it, the cipher component ill its various JUXtapos1t10ns 
The 
usual method of employmg such a square (i e , correspondmg to the enciphering equat10ns 
811:1c=811,,, 8v1v=0.,.) is to take as the cipher eqmvalent of a plam-text letter that letter which 
hes at the mtersection of the vertical column headed by the plam-text letter and the honzontal 
row begun by the key letter 
For example, the cipher eqmvalent of Ev with keyletter Tis the 
letter O., or E" (T11:)=0e 
The method given m paragraph b, for deternunrng the cipher eqmva- 


lents by means of the two shdmg stnps yields the same results as does the cipher square 
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Q U E S T I 0 N A B L Y C D F G H J K M P R V W X Z 
U E S T I 0 N A B L Y C D F G H J K M P R V W X Z Q 
E S T I 0 N A B L Y C D F G H J K M P R V W X Z Q U 
S T I 0 N A B L Y C D F G H J K M P R V W X Z Q U E 
T I 0 N A B L Y C D F G H J K M P R V W X Z Q U E S 
I 0 N A B L Y C D F G H J K M P R V W X Z Q U E S T 
0 N A B L Y C D F G H J K M P R V W X Z Q U E S T I 
N A B L Y C D F G H J K M P R V W X Z Q U E S T I 0 
A B L Y C D F G H J K M P R V W X Z Q U E S T I 0 N 
B L Y C D F G H J K M P R V W X Z Q U E S T I 0 N A 
L Y C D F G H J K M P R V W X Z Q U E S T I 0 N A B 
Y C D F G H J K M P R V W X Z Q U E S T I 0 N A B L 
C D F G H J K M P R V W X Z Q U E S T I 0 N A B L Y 
D F G H J K M P R V W X Z Q U E S T I 0 N A B L Y C 
F G H J K M P R V W X Z Q U E S T I 0 N A B L Y C D 
G H J K M P R V W X Z Q U E S T I 0 N A B L Y C D F 
H J K M P R V W X Z Q U E S T I 0 N A B L Y C D F G 
J K M P R V W X Z Q U E S T I 0 N A B L Y C D F G H 
K M P R V W X Z Q U E S T I 0 N A B L Y C D F G H J 
M P R V W X Z Q U E S T I 0 N A B L Y C D F G H J K 
P R V W X Z Q U E S T I 0 N A B L Y C D F G H J K M 
R V W X Z Q U E S T I 0 N A B L Y C D F G H J K M P 
V W X Z Q U E S T I 0 N A B L Y C D F G H J K M P R 
W X Z Q U E S T I 0 N A B L Y C D F G H J K M P R V 
X Z Q U E S T I 0 N A B L Y C D F G H J K M P R V W 
Z Q U E S T I 0 N A B L Y C D F G H J K M P R V W X 


FIGURB 21 


29. Cryptographmg and decryptographmg by identical primary mixed components -There 


is nothrng of special illterest to be noted ill connection with the use either of identical nnxed 
components or of an cqmvalent quadn(,ular table such as that shown ill Fig 21, ill encipherillg or 
deciphenng a message 
The basic pnnciples are the same as m the case of the shdrng of one 


nnxed component agaillst the normal, the drnplacements of the two components beillg controlled 
by changeable key words of varymg lengths 
The components may be changed at will and so on 
All this has been demonstrated adequately enough ill Elementary Military Cryptography, and 
Advanced Military Cryptography 


30. Prmciples of solut1on.-a Basically the prmmples of solut10n m the case of a crypto- 
gram enciphered by two identical mixed shdmg components are the same as m the precedmg 
case 
Pnmary recourse is had to the p11nciples of frequency and repetit10n of smgle letters, 
digraphs, tngraphs, and polygraphs 
Once an entermg wedge has been forced mto the problem, 
the subsequent steps may consist merely m contmumg along the same hnes as befoie, buildrng 
up the solut10n bit by bit 


b Doubtless the quest10n has already arisen m the student's mmd as to whether any 
pnnciples of symmetery of posit10n can be used to assist m the solut10n and m the reconstruct10n 
of the cipher alphabets m cases of the krnd under considerat10n 
This phase of the subJect will 


be taken up ill the next sect10n and will be treated ma somewhat detatled manner, because the 
theory and pnnciples illvolved are of very wide apphcat10n m cry:ptana.lytics. 


SECTION VII 


THEORY OF INDIRECT SYMMETRY OF POSITION IN SECONDARY ALPHABETS 


Paragraph 
Reconstruct10n of pnmary components from secondary alphabets------------------------------------ 
31 
31 Reconstruction of primary components from secondary alphabets -a Note the two 
secondary alphabets (1) and (2) given m paragraph 28c 
Externally they show no resemblance 
or symmetry despite the fact that they were produced from the same pnmary components 
Nevertheless, \\hen the matter is studied with care, a symmetry of poSit10n is discoverable 
Because it is a hidden or latent phenomenon, it may be termed latent symmetry of position 
However, m previous texts the phenomenon has been designated as an indirect symmetry of position 
and this termmology has grown mto usage, so that a change is perhaps now madVISable 
Indirect symmetry of position is a very mterestmg and exceedmgly useful phenomenon m 
cryptanalytics 


b Consider the followmg secondary alphabet (the one labeled (2) m paragraph 28c) 


(2) {Plam_ ------ A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


Cipher------ J K R V Y W X Z F Q U M E H G S B T C D L I 0 N P A 
c Assuming it to be known that this is a secondary alphabet produced by two pnmary 


identical nnxed components, it is desired to reconstruct the latter 
Construct a cham of alter- 


natmg plain-text and cipher-text eqmvalents, beginnmg at any pomt and contmumg unttl the 
cham has been completed 
Thus, for example, beginnmg with Ap=J 0 , Jp=Q0 , Qp=B0 , 
, and 


droppmg out the letters common to successive pru.rs, there results the sequence A J Q B 
By 
completmg the cham the followmg sequence of letters is estabhshed 


AJQBKULMEYPSCRTDVIFWOGXNHZ 


d This sequence consists of 26 letters 
When slid against itself it 'UJ1l1, produce e.cactly the 
same secondary alpliabets as do the primary components based upon the word QUESTIONABLY 
To demonstrate that this is the case, compare the secondary alphabets given by the two settings 
of the externally different components shown below 
Plam component ______ QUESTIONABLYCDFGHJKMPRVWXZQUESTIONABLYCDFGHJKMPRVWXZ 
Cipher component_____ 
QUESTIONABLYCDFGHJKMPRVWXZ 
Secondary alphabet (1) 


Plam ---------- A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
Cipher ------- J K R V Y W X Z F Q U M E H G S B T C D L I 0 N P A 


Plam component ______ AJQBKULMEYPSCRTDVIFWOGXNHZAJQBKULMEYPSCRTDVIFWOGXNHZ 
Cipher component_____ 
AJQBKULMEYPSCRTDVIFWOGXNHZ 
Secondary alphabet (2) 


Plam___________ A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
Cipher------- J K R V Y W X Z F Q U M E H G S B T C D L I 0 N P A 


(52) 
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e Smee the sequence A J Q B K 
gives exactly the same equivalents m the secondary 
alphabets as the sequence Q U E S T 
gives, the former sequence is cryptographically 


eqmvalent to the latter sequence 
For this reason the A J Q B K 
sequence is termed 


an equivalent primary component 1 If the real or original primary component is a key-word rmxed 
sequence, it is hidden or latent within the eqmvalent pnmary sequence, but it can be made patent 
by decimation of the eqmvalcnt pnmary component 
The procedure is as follows Fmd three 
letters m the equivalent pnmary component such as aie hkely to have formed an unbroken 
sequence m the onginal pnmary component, and see if the mterval between the first and second 
is the same as that between the second and third Such a cao;e is presented by the letters W, X, 
and Z m the equivalent pnmary component above Note the sequence 
W 0 G X N H Z 
, 
the distance or mterval between the letters W, X, and Z is two letters Contmmng the chain by 
addmg letters two intervals removed, the latent ongmal pnmary component is made patent 
Thus 


i 
2 a ' a e 7 s 9 ro u ~ u H 
~ M n IB 
~ ~ n ~ ~ ~ ~ H 
WXZQUESTIONABLYCDFGHJKMPRV 


f It is posSible to perform the steps given m c and em a combmed smgle operation when the 
ongmal pnmary component is a key-word mixed sequence 
Startmg with any pair of letters (m 
the cipher component of the secondary alphabet) hkely to be sequent m the key-'1\ord mixed 
sequence, such as JK0 m the secondary alphabet labeled (2), the followmg cham of digraphs may 
be set up 
Thus, J, K, m the plam component stand over Q. U. respectively, m the cipher com- 


ponent, Q. U. m the plain component stand over B, L. respectively, m the cipher component, and 
so on 
Connectmg the pairs ma senes, the followmg results are obtamed 


~~~~~~KM~~~u~~~~~re~ffi~~~~~~~ 
TI-+ DF ~ VW ~ IO~ FG ~ WX ~ ON~ GH ~ XZ ~NA~ HJ~ ZQ ~AB-+ JK 


These may now be umted by means of their common letters 


JK ~ KM ~ MP ~ PR ~ RV -+ etc =J K M P R V W X Z Q U E S T I 0 N A B L Y C D F G H 


The ongmal pnma.ry component is thus completely reconstructed 
g Not all of the 26 secondary alphabets of the senes yielded by two shdmg primary compo- 


nents may be used to develop a complete equivalent pnmary component If exannnat1on be made, 
it will be found that only 13 of these secondary alphabets will yield complete equivalent pnmary 
components when the method of reconstruction shown m subparagraph c above IS followed 
For 
example the following secondary alphabet, which IS also derived, from the prrmary components 
based upon the word QUESTIONABLY wtll not yield a complete cham of 26 plam text-c1pher- 
plam text eqmvalents 


Plam________ A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
Cipher ______ C D H J 0 K M P B R V F W Y L X T Z N A I Q U E G S 


1 Such an equivalent component is merely a sequence which has been or can be developed or derived from 
the ongmal sequence or basic pnmary component by applymg a decimation process to the latter, conversely, 
the origmal or basic component can be derived from an equivalent component by applying the same sort of 
process to the equivalent component 
By decimation 18 meant the selection of elements from a sequence accord- 
ing to some fixed interval 
For example, the sequence A E I M 
is denved, by dec1mation, from the 
normal alphabet by selecting every fourth lcttel' 
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Equivalent primary component 


1 
ll 
3 
f 
II 
8 
7 
8 
ti 10 11 12 18 11 2 
3 
ACHPXEOLFKVQT ACH 
(The A C H sequence begms agam) 


h It is seen that on]y 13 letters of the cham have been estabhshed before the sequence begms 
to repeat itself 
It is evident that exactly one-half of the cham has been estabhshed 
The other 
half may be estabhshed by begmnmg with a letter not m the first half 
Thus 


1 
ll 
3 
' 
II 
8 
7 
8 
9 10 11 12 13 I 
1 
2 
3 
BDJRZSNYGMWUI BDJ 
(Tho B D J sequence begms agam ) 


i It is now necessary to distnbute the letters or each half-sequence withm 26 spaces, to 
correspond with their placements m a complete alphabet 
This can oruy be done by alloWing a 


constant odd number of spaces between the letters of one of the half-sequences 
D1stnbutions 
a.re therefore made upon the basis of 3, 5, 7, 9, 
spaces 
Select that distnbution which 


most nearly comc1des with the d1stnbution to be expected m a key-word component 
Thus, for 
example, with the first half-sequence the d1str1but1on selected is the one made by leavmg three 
spaces between the letters 
It 1s as follows 


1 2 a ' 
11 
1 7 s ti ro 11 u u u a a n u ~ ~ n ~ ~ ~ ~ s 
A-L-C-F-H-K-P-V-X-Q-E-T-0- 


3 Now mterpolate, by the same constant mterval (three m this case), the letters of the other 
half-sequence 
Notmg that the group F- H appears m the foregomg d1Stnbut1on, it is apparent 
that G of the second half-sequence should be mserted between F and H 
The letter which unme- 


d1a.tely follows Gm the second half-sequence, viz, M, 1s next mserted m the poBition three spaces to 
the nght of G, and so on, unttl the mterpolation has been completed 
This yields the ongma.l 
pnmary component, which is as follows 


1 
2 a 4 
11 
1 
1 s u ro 11 u n u a ffl n u m ~ n n ~ ~ z s 
ABLYCDFGHJKMPRVWXZQUESTION 


k Another method of handlmg cases such as the foregomg IS md1cated m subparagraph j 
By extendmg the prmc1ples set forth m th'1t subparagiaph, one may reconstruct the followmg 
cham of 13 pmrs from the secondary alphabet given m subparagraph g 


1 
ll 
s 
' 
II 
8 
7 
8 
9 
10 
11 
12 
13 I 
1 


CD -+ HJ -+ PR -+ XZ -+ ES -+ ON -+ LY -+ FG -+ KM -+ VW -+ QU -+ TI -+ AB -+ 
CD • • • 


Now find, m the foregomg cham, two pairs hkely to be sequent, for example HJ and KM and count 
the mterval between them m the cham 
It 1c;; 7 (countmg by pairs) 
If this decrmat1on mterva.l 
1s now applied to the cham of pairs, the follo'Vl-mg 1s estabhshed 


1 
2 a 4 
11 
B 
7 s 9 ro 11 u u u a a n u m ~ n n ~ ~ ~ ~ 
HJKMPRVWXZQUESTIONABLYCDFG 


l The reason why a complete cham or 26 letteis cannot be constructed from the secondary 
alphabet given under subparagratph g is that it represents a. case m which two primary com- 
ponents of 26 letters were shd an even number of mtervals apart 
(This will be explamed m 
further detail m subparagraph r below) There are m all 12 such cases, none of which will 
a.dnut of the construction of a complete cham of 26 letters In addition, there IS one case where- 
m, despite the fact that the pnmary components are an odd number of mtervals apart, the 
secondary alphabet cannot be made to yield a complete cham of 26 letters for an eqmvalent 
pnmary component 
This is the case m which the displacement is 13 mtervals 
Note the 
secondary alphabet based upon the pnmary components below (which are the same as those 
shown m subparagraph d) 
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PRIMARY COMPONENTS 
QUESTIONABLYCDFGHJKMPRVWXZ 
DFGHJKMPRVWXZQUESTIONABLYC 


SECONDARY ALPHABET 


Plam__________ A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
Cipher ________ R V Z Q G U E S K T I W 0 P M N D A H J F B L Y X C 


m If an attempt is ma.de to construct a cham or letters from this secondary alphabet alonej 


no progress can be ma.de because the alpha.bet is completely reciprocal 
However, the crypt.. 


analyst need not at all be baffied by this case The attack will follow a.long the hnes shown below 
m subparagraphs n and o 


n If the ongmal primary component is a key-word IDIXed sequence, the cryptanalyst may 
reconstruct it by a.ttemptmg to "dovetail" the 13 rec1procnl pairs (AR, BV, CZ, DQ, EG, FU, HS, 
IK, JT, LW, MO, NP, and XY) mto one sequence 
The members of these pairs are all 13 mtervals 
ape.rt 
Thus 


• 
1 
ll 
8 
' 
II 
0 
7 
8 
I 
ro 11 H a 
A 
R 
B 
V 


c 
z 
D 
Q 
E 
G 
F 
U 


H 
S 


I 
K 
J 
T 
L 
W 
M 
0 


N 
• • • • p 
x 
y 


FlGtJBB ll2 


Write out the senes of numbers from 1 to 26 and msert as many pairs mto poBit1on as posBible 


bemg gmded by conBidera.t1ons of probable partial sequences m the key-word nuxed sequence, 
Thus 
o 1 
ll a ' 
11 
1 
1 s u ro 11 u a u u ~ 
ABCD 
RVZQ 


It begms to look as though the key-word commences with the letter Q, m which case it should 
be followed by U ThIS means that the next pair to be mserted is FU 
ThuCJ 


o 1 
2 a ' a B 1 s 
11 
ro 11 12 1s u l& 1& 11 


ABCDF 
RVZQU 


The sequence ABC D F means that Eis m the key Perhaps the sequence IS ABC D F G H 


Upon tnal, usmg the pairs EG and HS, the followrng placements a.re obta.med 


o 1 
2 a ' 
11 
B 1 s u ro n u u u a a n u a 
ABCDFGH 
RVZQUES 


This suggests the word QUEST or QUESTION 
The pair JT is added 
o 1 2 a ' 
1 o ' a ti ro 11 u a u u a n u D • 
ABCDFGHJ ••••• RVZQUEST 
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The sequence G H J suggests G H J K, wluch places an I after T Enough of the process has 
been shown to make the steps clear 
o Another method of cll'cumventmg the difficulties mtroduced by the 14th secondary 


e.lphabet (displacement mterval, 13) is to use it m conJunction with another secondary alphabet 
wluch is produced by an even-mterval displacement 
For example, suppose the followmg two 
secondary alphabets are available 1 


0-------- A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
L______ R V Z Q G U E S K T I W 0 P M N D A H J F B L Y X C 
L __ XZESKTIORNAQBWVLHYMPJCDFUG 


F1ou11E 23 


The first of these secondanes is the 13-mterval secondary, the second is one of the even- 
mterval secondanes, from which only holf-cham sequences can be constructed 
But if the con- 
struction be based upon the two sequences, 1 and 2 m the foregomg diagram, the followmO' IS 
obta.med 
" 
RXUTNLDHMVZEIAYFJPWQSOBCGK 


Tlus is a complete eqmvalent pnmary component 
The ongmal key-word mixed component 
can be recovered from it by decrmat1on based upon the 9th mtervol 


RVWXZQUESTIONABLYCDFGHJKMP 


'P (1) When the pnmary components are 1dent1cal mixed sequences proceedmg m opposite 


dll'ect1ons, all the secondary alphabets will be reciprocal alphabets 
Reconstruction of the 
pnmary component can be accomphshed by the procedure mdwatcd under subparagraph o 
above 
Note the followmg three reciprocal secondary alphabets 


1 
2 
8 
4 s 
6 
7 
8 
9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 28 26 


~-ABCDEFGHIJKLMNOPQRSTUVWXYZ 
L__ P M H G Q F D C W Y L K B R V A E N Z X U 0 I T J S 
2____ W V M K S J H G Q F D R C X Z Y I L E U T B A N P O 
3____ T S S Z L X W V N R P E M I 0 K C J B A Y H G F U D 


F10l1BE 24 


(2) Usmg hnes 1 and 2, the following cham can be constructed (eqmvalent pnmary com- 
ponent) 


PWQSOBCGKRXUTNLDHMVZEIATFJ 


1 The method of wntmg down the secondaries shoVI n m figurP 23 will hereafter be followed m all l'ases when 
alphabet reconstruction skeletons are necessary 
The top lme will be understood to be the plam component it 
is common to all the secondary alphabets, and is set off from the cipher components by the heavy black h~e 
This top lme of letters will be designated by the digit 0, and will be referred to as "the zero lme" m the diagram 
The succesSive Imes of letters, which occupy the space below the zero lme and which contam the '\-&nous cipher 
components of the several secondary alphabets, will be numbered serially 
These numbers may then be used as 
reference numbers for de'lignatmg the hon,onta.l Imes m the diagram 
The numbers standmg above the letters 
may be used as reference numbers for the vertical column~ m the diagram 
Hence, any letter m the reconstruc- 


tion skeleton may be designated by coordmates, givmg the horizontal or X coordmate first 
Thus D (2-11) 
means the letter D standing m lme 2, Column 11 
' 
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Or, usmg Imes 2 and 3 


WTYKZODPUAGVSLJXICMQNFREBH 


The ongmol key-Vl-ord rmxed pnmary component (based on the word QUESTIONABLY) can 


be recovered from either of the two foregomg eqmvalent pnmary components 
But If Imes 1 
and 3 are used, only half-cha.ms can be constructed 


PTFXAKECVOHQL 
and 
M S D W N J U Y R I G Z B 


Tlus is because 1 and 3 are both odd-mterval secondary alphabets, whereas 2 is an even- 
mterval secondary 
It may be added that odd-mterval secondanes are charactenzed by havmg 
two cases m wluch a plam-text letter is enciphered by itself, that IS, 0p IS 1dent1cal w1th 00 
Tlus phrase "1dent1cal with" will be represented by the symbol =, the phrase "not identical 
with" wtll be represented by the symbol t= 
(Note that m secondary alphabet number 1 above, 
F P=F0 and Up=U01 m secondary alphabet number 3 above, Mp=M0 and Op=0 0 ) 
Tlus charac- 
tenstlc will enable the cryptanalyst to select at once the proper two secondanes to work with m 
case several are available, one should show two cases where 0p=0°' the other should show 
none 


q (1) When the pnmary components are drlf erent mixed sequences, thell' reconstruction 
from secondary cipher alphabets follows along the same hnes as set forth above, under b to 3, 
mclus1ve, with the exception that the selection of letters for butldmg up the cham of eqwvalents 
for the pnmary cipher component is restncted to those below the zero lme m the reconstruction 
skeleton 
Havmg reconstructed the pnmary cipher component, the plam component can be 


readily reconstructed 
Tlus will become clear If the student will study the folloWing example 


0____ A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


L___ T V A B U L I Q X Y C W S N D P F E Z G R H J K M 0 
2.... Z J S T V I Q R M 0 N K X E A G B W P L H Y C D F U 


F1ouu28 


(2) Usmg only Imes 1 and 2, the followmg cham IS constructed 


TZPGLIQRHYOUVJCNEWKDASXMFB 


Tlus IS an eqmvolent pnmary cipher component 
By findmg the values of the successive 
letters of tlus cham m terms of the plam component of secondary alphabet number 1 (the zero 
hne), the followmg IS obtamed 


TZPGLIQRHYOUVJCNEWKDASXMFB 
ASPTFGHUVJZEBWKNRLXOCMIYQD 


The sequence ASP T 
IS an equivalent primary plam component 
The ongmal key- 
word mixed components may be recovered from each of the eqmve.Ient pnmary components 
That for the primary plam component is based upon the key PUBLISHERS MAGAZINE, that for 
the primary cipher component is based upon the key QUESTIONABLY 
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(3) Another method of accomphslung the process millcated above can be illustrated graphi- 
cally by the followmg two chams, based upon the two secondary alphabets set forth m sub- 
paragraph q (1) 


1 
2 
3 
' 
6 
6 
7 
8 
9 W ll U ra H ll ~ U IB ~ ~ ~ " 
D ~ ~ 26 
£'-------- A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
!________ T V A B U L I Q X Y C W S N D P F E Z G R H J K M 0 
a ___ Z JS TV IQ RM 0 N K XE AG B WP L HY CD FU 


Coll 
Col 2 
A (0-1) 
- 
T (1-1), - 


D (0-4) 
- 
B (1-4), - 


Q (0-17) - 
F (1-17), - 


Y (0-25) - 
M (1-25), - 


I (0-9) 
- 
X (1-9), - 


M (0-13) -+ S (1-13), -+ 


etc 
etc 


T (2-4) -+ D (0-4), 
--+ 


B (2-17)--+ Q (0-17), --+ 
F (2-25) --+ 
Y (0-25), --+ 


M (2-9) -+ I (0-9), --+ 
X (2-13) --+ M (0-13), --+ 
s (2-3) --+ c (0-3), - 


FIOUKJ: 26 


(4) By JOmm.g the letters m Column 1, the followmg cham IS obtamed A D Q Y I M, etc 
If thl8 be examm.ed, it will be found to be an eqmvalent pnmary of the sequence based upon 
PUBLISHERS MAGAZINE 
By JOIIllilg the letters m Column 2, the followmg cham is obta.med 
T B F M X S 
Th.Is is an eqmvalent pumary of the sequence based upon QUESTIONABLY 
r A final word concernmg the reconstruction of pnmary components m general may be 
added It has been seen that m the case of a 26-element component shdmg aga.mst itself (both 
components proceeding m the same direction), 1t IS only the secondary alphabets resultmg from 
odd-mterval displacements of the pnmary components which permit of reconstructmg a smgle 
26-letter chBJ.ll of eqmvalents 
Th.Is IS true except for the 13th mterval displacement, which 


even though an odd number, still acts hke an even number dISplacement m that no complete 
cha.m of equivalents can be established from the secondary alphabet 
ThlS exception gives the 
clue to the b8.Slc reason for this phenomenon 1t 1s that the number 26 has two factors 2 and 13 
J 
I 
which enter mto the picture 
With the e~cept1on of displacement-mterval 1, any displacement 
interml which is a 8'Ub-multiple of, 01 has a factor in common with the number of letters in the primary 
sequence will yield a secondary alphabet from which no complete chain of 26 equivalents can be 
derived for the construdion of a complete e'J.'Uivalent primary component 
Th.Is general rule 1s 
apphcable only to components which progress m the same direction, If they progress m opposite 
directions, all the secondary alphabets are reciprocal alphabets and they behave euctly hke 
the reciprocal secondanes resulting from the lJ-mterval dISplacement of two 26-letter identical 
components progressmg m the same direction 
s The foregomg remarks give nse to the followmg observations based upon the general 
rule pomted out above 
Whether or not a complete equivalent pnmary component 1s denvable 
by decrmation from an onginal pnmary component (and If not, the lengths and numbers of chams 
of letters, or mcomplete components, that can be constructed m attempts to denve such equiv- 
alent components) will depend upon the number of letters m the ongmal pnmary component 
and the specific decrmat10n mterval selected 
For example, m a 26-letter ongmal pnmary com- 
ponent, decrmat10n mterval 5 wtll yield a complete eqmvalent pnmary component of 26 letters, 
whereas decrmat1on mtervals 4 or 8 will yield 2 chams of 13 letters each 
In a 24-letter compo- 
nent, decrmat1on mterval 5 will also yield a complete eqmvalent pnmary component (of 24 letters), 
but decrmat1on mterval 4 wtll yield 6 chams of 4 letters each, and decimation mterval 8 will 
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yield 3 ch8Jlls of 8 letters each It also follows that m the case of an ongmal pnmary com- 
ponent m wlnch the total number of characters 11> a pnme number, all decrmat1on mtervals will 
yield complete eqmvalent prrmary components 
The followmg table has been drawn up m the 
hght of these observations, for ongmal pnmary sequences frnm 16 to 32 elements 
(All pnme- 
number sequences have been omitted ) In th.Is table, the column at the extreme left gives the 
vanous decrmation mte1 vals, om1ttmg m each case the first mterval, winch merely gives the 
ongmal pnmary sequence, and the last mterval, which merely gives the ongmal sequence 
reversed 
The top hne of the table gives the vauous lengths of origmal primary sequences from 
32 down to 16 
(The student should bear m mmd that sequences contalillilg characters m addi- 
tion to the letters of the alphabet may be encountered, he can add to this table when he 18 
mterested m sequences of more than 32 characters ) The numbers withm the table then show, 
for each combmat1on of decrmation mterval and length of, ongmal sequence, the lengths of the 
chams of characters that can be constructed 
(The student may note the symmetry m each 
column ) The bottom lme shows the total number of complete equivalent pnmary components 
which can be denved for each dllferent length of ongmal component 


Decimation 
Interval 


2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 
26 
27 
28 
29 
30 


Total number 
of complete 
sequences 


Number of characters m or1glnal primary component 


32 30 28 27 26 25 24 22 
21 
20 18 16 
16 15 14 27 
13 25 12 
11 
21 
10 
9 
8 
32 10 28 
9 26 25 
8 22 
7 20 
6 16 
8 15 
7 27 
13 25 
6 11 
21 
5 
9 
4 
32 
6 28 27 26 
5 24 22 21 
4 18 16 
16 
5 14 
9 13 25 
4 11 
7 10 
3 
8 
32 30 
4 27 
26 25 24 22 
3 20 18 16 
4 15 
7 27 
13 25 
6 11 
21 
5 
9 
2 
32 10 28 
9 26 25 
8 22 
7 20 
2 16 
16 
3 14 27 
13 
5 12 11 21 
2 
9 
8 
32 30 28 27 26 25 24 
2 21 
20 18 16 
8 
5 
7 
9 13 25 
2 11 
7 
5 
3 
4 
32 30 28 27 
2 25 24 22 21 
20 18 16 
16 15 
2 27 
13 25 
12 11 
3 10 
9 
8 
32 
2 28 
9 26 
5 
8 22 
7 
4 
6 
2 15 
7 27 
13 25 
6 11 
21 
5 
9 
32 30 28 27 26 25 24 22 
21 
20 


16 
5 14 
9 13 25 
4 11 
7 10 


32 30 28 27 26 25 24 22 
21 
8 
3 
7 27 
13 
5 
6 11 
32 10 
4 
9 26 25 
8 
16 15 14 27 13 25 12 
32 30 28 27 26 25 
4 
5 
7 
9 13 
32 
6 28 27 
16 15 14 
32 10 
8 15 
32 
16 
14 
6 10 
16 10 18 16 
8 10 
6 
4 
6 


SECTION VIII 


APPLICATION OF PRINCIPLES OF INDIRECT SYMMETRY OF POSITION 


paragraph 


Applying the pnnciples to a specific example------------ --------------------------------------------------------------------- 
32 
The cryptogram employed in the exposition.------------ -------------------------------------------------------------------- 
33 
Fundamental theory _____ -------------------------------------- ---- ---------------------------------------------------------------- 
34 


Appllca.tion of pnnciples __ -- ------------------------------------------------------------------------------------------------------ 
35 
General remarks________ _ ------------------------------------- -------------------·------------------------------------------------- 
36 


32 Applying the prmciples to a specific example -a The precedmg section, with the 
many details covered, now forms a sufficient base for proceedmg with an exposition of how the 
pnnciples of mdirect symmetry of position can be apphed very early m the solution of a poly- 
alphabetic substitution cipher m which shdmg pnmary components were employed to produce 
the secondary cipher alphabets for the enciphermg of the cryptogram 


b The case descnbed below will serve not only to explam the method of applymg these 


pnnciples but will at the same time show how their application greatly facilitates the solution 
of a smgle, rather difficult, polyalphabetic substitution cipher It is reahzed, of course, that the 
cryptogram could be solved by the usual methods of frequency and long, patient experimentation 
However, the method to be described was actually apphed and very matenally reduced the 
amount of time and labor that would otherwise have been required for solution 


33 The cryptogram employed m the exposition-a The problem that will be used m this 
exposition mvolves an actual cryptogram submitted for solution m connection with a cipher 
device havmg two concentnc disks upon which the same random :nuxed alphabet appears, both 
alphabets progressing m the same direction 
This was obtamed from a study of the descnptive 


ciroular accompanymg the cryptogram 
By the usual process of factonng, it was determmed 


that the cryptogram mvolved 10 alphabets 
The message as arranged accordmg to its penod 


is shown m Figure 27, m which all repetitions of two or more letters are mdicated 


b The tnhteral frequency distnbutions are given m Figure 28 
It will be seen that on 
account of the brevity of the message, conSldenng the number of alphabets mvolved, the fre- 
quency di&tnbutions do not yield many clues 
By a very careful study of the repetitions, 
tentative mdividual determmations of values of cipher letters, as illustrated m Figures 29, 30, 
31, and 32, were made 
These are given m sequence and m detatl m order to show that there is 
notlung artificial or arbitrary m the prehmmary stages of analysis here set forth 


(60) 


12346878910 


A W F U P C F 0 C J Y 


B 
G B Z D P F B 0 U 0 
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THE CRYPTOGRAM 


(Repetit10ns undcrhned) 
12846878910 


P 
R C V 0 P N B L C W 


Q LQZAAAMDCH 


123468781110 


EE UDZFMTGQJ 


FF L F U Y D T Z V tl.._Q_ 


C GRFTZMQM!_Y 
R BZZCKQOIKE._GG ZGWNKXJTRN 
- 
--- 


D KZY....Q_QYFI._R!L S_QFBSCVXC!!.JL HH_.ITXCQ...lMVLW 


E GJXNLWYOUX 
T ~TZSDMXWCM II B G B W W 0 Q R G N 
- 
-- 


F IKWE.f-9.ZOKZ 
u RKUHEQEDGX 
JJ HHVLAQQVAV 


G PRXDWLZICW 
v FKVHPJJKJY KK 
J Q W 0 0 T T N V Q 


H GKQHOLODVM 
w 
-=-- 
-- 
YQD~XLLL LL BKXDSOZRSN 
-- - 
- 


I 
G 0 X S N Z H A S E 
- 
- 
X GHXEROQPSE 
- 
-- 
MM 
Y U X 0 P P Y O X Z 
- 
- 
---=- 


J 
B B J I LI F J H D 
Y GKBWTLFDUZ 
-=--- 
- 
NN _Jj 0 Z O W M X C G Q 


K 
Q C B Z E X Q T il Z 
0 C D H LI Z T U Z 
00 
J J U G D W LI V M 


L 
J C Q R Q F V M L H 
AA 
K L B P C J 0 T X E 
PP 
U K W P E F X E N r_ 


M S R Q E W M L N A ~ BB 
H S P 0 P N M D L M._ QQ _Q C U G D W P E U H 


N .JL..§. X E R 0 Z J §._!__ CC 
G C K W D V B L S E 
- 
--- RR Y B W E W V M D W J 
-- 
- 


0 _g V Q W E J M K G H 
DD 
G S U G D P 0 T H X 
SS 
R Z X 


1112018-88--11 
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TRILITERAL FREQUENCY DISTRIBUTIONS 
v 


I 
A B c D E F G H I 
J 
K L M N 0 
p 
Q R s T u v w x y z 


A B c D E F G H I 
J 
K L M N 0 
p 
Q R s T u v w x y z 
AA 
PF GY ZX ZM 
CQ NW 
SZ HL DF RF EO DO WL 
DL 
TM 
LQ 
SV SM WJ 
NX 
OT EQ 
EO 
EM 
EB FF 
XK YB ES XK ZC VZ WQ 
ZC ZR DC HC HR 
MK 
-F 
YQ QT 
PJ WV HQ 
IQ 
HM 


HZ FC 
OR NH 
VQ ZL JF 
MK 
NT QG 
PJ GP PF 
ON 
WO 


XK 
WJ ZO 
QJ 
JZ 
NU 
YT 
HJ 
OM 


WG 
WK 
HB 
GP 
ON 
EV 


QK 
MO 
GW 
OP 
ES 
GW 
EV 
VI 
LH 
EK 
A B c D E F G H I 
J 
K L M N 0 
p 
Q R s T u v w x y z 


MC 
AM 
co 
EM 
WZ ZQ PB RZ DO PZ 
DZ 
ex LY EQ DF NH 


ES 
PB 
PJ 
00 WL PM RQ DM PF 
OT 
DB DQ KJ 
QV 
ex 
TF DX 
WQ PY KO 
WM DP 


II 
EX 
co 
wz 
sz 
EE 
FT 
AQ 
A B c D E F G H I 
J 
K L M N 0 
p 
Q R s T u v w x y z 
wx 


GZ QB 
WU ZW GX 
GX IW KB 
GX 
LZ GF GX ZZ YX GQ 
KU 


BJ JQ 
CB BB HV 
JU GQ 
HZ 
YD PX HP YX 
BZ 
VII 


YW RV 
LU 
RU 
JW SQ GU 
RX 
A B c D E F G H I 
J 
K L M N 0 
p 
Q R s T u v w x y z 


OD 
FV 
FO 
QD YT 
ZA 
JK 
MN JK 
FC WE MM 
MG 
FM 
VC WO QO 


GK 
GB 
NL 
QJ 
XT 
AD 
LO 
XT 
TN 
MW PO LI 
cu 
BO 
VL 
LD 
ND 
QI 
OP 
JL 
OJ 


BX 
PV 
JT 
OR 
MC 
MT 
uw 
VD 
PT 
QV 
FE 
TV 
WR 
OR 


III 


E F G H I 
J 
K L M N 0 
p Q R s T u v w x y z 
VIII 
A B c D 


CZ 
QP 
RT 
BI CW 
SO KH 
FP CO KE JN 
BD 
A B c D E F G H I 
J 
K L M N 0 
p 
Q R s T u v w x y z 


FS 
CH 
CR 
ZG KH GN RD 
QA 
HS 
OJ OV XN 
TQ 
ZC FH MG BC QA LA BU QS 
QG 
FR 
ZH XC 


KW 
KZ 
RE 
KH HL QO OS 
zc 
XH YC PU 
OK ZS JJ XL VL TV YU 
ZS 
QX 
ML 


LP 
vw 
SG 
KP SE 
TS 
XG EG 
BS 
ZK 
QV 
zu 
QA 


GW 
FY 
BE HE 
00 
FU 
YX 
ox 
JG 
TC 
ML 
OH 


CG 
KO 
MY 
JR 
uo 
IX 
z- 
A B c D E F G H I 
J K L M N 0 
p 
Q R s T u v w x y z 


IV 
MV 
IW 
KH JD 
CY OZ MH 
EF 
GJ TW AE 
00 DM 
TZ DJ 


N 0 
p 
Q R s T u v w x y z 
NE 
LW 
DX CQ 
KY IF LL 
TN JE 
OX NQ 
TE 
A B c D E F G H I 
J 
K L M 
vv 
DH 
RN TX 
DM 
PE 
DZ RM 
oz 


ZA 
ZK ZP WP 
UD QO JP 
VA 
XL VP UC 
QQ XN FZ 
QE 
UD BE 
WM 
CQ VQ 
vw 
LE 
TZ 


XD XW QW 
UD UE 
WK PP DC 
BC 
BT 
OF 
RN 
EH 


XS XR 
UD VP 
WO BC 
ZD 
KO 


XR 
UD DW 
XP WE 
BW 
x 


WW 
zw 
A B c D E F G H I 
J 
K L M N 0 
p 
Q R s T u v w z y z 


HQ SB KC 
LS 
QL 
LG VG RY UG 
HZ 
AK RG UI JG KP 


AG NC 
GR 
YR 
CR GH 
HZ 
AJ CG GF JY XJ 


SG 
CB 
LG SY 
VB 
CL HB 
uo 


SG 
UY 
vu 
GJ 
LB 
UK 
XH 
XH 
' 
SG 


FIGUB& 28 
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INITIAL VALUES FROM ASSUMPTIONS 


1 
2 
3 
5 
G.=Ev, K0=Ev, X0=Ev, and D0 =Ev, from frequency cons1derat10ns. 
345 
456 
901 
UGD=THE, PCJ=THE, and SEG=THE, from study of repet1t10ns 


128411678910 


A W F U P C F 0 C J Y 
TT H 
B G B Z D P F B 0 U 0 


E 


C GRFTZMQMAV 


E 
D K Z U G Q Y F T R !l 


THE 


E GJXNLWYOUX 
E 
E 
-- 


F I K W E E.._Q. Z 0 K Z 
E-- 


G P R X D W L Z I C W 
E 
- 


H GKQHOLODVM 
EE 
-= 


I Q 0 X S N Z H A S E 
E 
E 
TH 


J 
B B J I E.._Q. F J H D 


K Q C B Z E X Q T X Z 


L J C Q R Q F V M L H 


M S R Q E W M L N A ~ 


H 
N g S X E R 0 Z J S E 
EE 
TH 


0 g V Q W E J M K G H 
E 
E 


I 
2 
3 
4 
5 
6 
7 
8 
9 10 
1 
2 
8 
4 
3 
6 
7 
8 
9 
10 


p 
R C V O P N B L Q.J'! 
EE 
B K D Z F M T G Q J 
E 
Q L Q Z A A A M D C H 
FF 
L F U Y D T Z V !:!.....Q 


T 
E 


R B Z Z C K Q 0 I K E 
GG 
~ G W N K X J T R li 


S Q F B S C V X C !:!.....Q 


H 
T 
~ T Z S D M X W C M 
E 


U RKUHEQEDGX 


E T 


V F K V H P J J K J Y 
E 
E 


W Y Q D P C J X L L L 
THE 
X G H X E R 0 Q P S E 
E 
E 
TH 
Y .Q_K B W T L F D U Z 
E E 


Z 
0 C D H W M Z T U Z 


AA 
K L B P C J 0 T X E 
T H E 
- 
H 


BB 
HS P 0 P~ MDL M 


CC g C K W D V B L S E 
E 
E 
TH 


DD g S U G D P 0 T H X 


ETHE 


FIGURE 29 


HH 
X: T X C D P M V L W 
E 
E 
II B G B W W 0 Q R G N 


JJ H H V L A Q Q V A V 


KK JQWOOTTNVQ 


LL 
B K X D S 0 Z R S li 


EE 
T 


MM 
X: U X 0 P P Y 0 X Z 


NN H 0 Z 0 W M X C G Q 


00 
J J U G D W .Q_R V M 
THE 


PP 
U K W P E F X E N E 


E 
T 


QQ Q C U G D W P E U H 
THE 


RR 
Y B W E W V M D Y J 


SS R Z X 
E 
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ADDITIONAL VALUES FROM ASSUMPTIONS (I) 


2 
Ref er to line DD m Figure 29, S 0 assumed to be N" 


9 
Refer to hne Mm figure 29, A0 assumed to be Wv 


9 10 I 
2 3 4 5 


Then m Imes C-D, A V K Z U G D is assumed to be WITH THE 


1 
2 
8 
4 
3 
6 
7 
8 
g 
10 


A WFUPCFOCJY 


TT H 
B G B Z D P F B 0 U 0 


E 


C G R F T Z M Q M A V 


E 
WI 
D K Z U G D Y F T R !£ 


TH THE 
E Q J X N L W Y 0 U X 
E 
E 
- 
F I K W E .e_g Z 0 K Z 
E- 


G PRXDWLZICW 
E 
-= 


H G K Q H 0 L 0 D V M 


EE 
- 
I Q 0 X S N Z H A S E 
E 
E 
TH 


J 
B B J I .e_g F J H D 


K Q C B Z E X Q T X Z 


L JCQRQFVMLH 


M S R Q E W M L N A ~ 


W H 
N G S X E R 0 Z J S E 


ENE 
TH 


0 Q V Q W E J M K G H 
E 
E 


12345678910 
1 
2 
d 
4 
5 
6 
7 
8 
9 10 
P R C V 0 P N B L C W 
EE B K D Z F M T G Q J 
E 


Q L Q Z A A A M D C H 
FF 
L F U Y D T Z V !:!.....Q 


T 
E 
R B Z Z C K Q 0 I K E 


H 


S Q F B S C V X C !:!.....Q 


H 
T 
~ T Z S D M X W C M 
E 


U RKUHEQEDGX 


E T 


V 
F K V H P J J K J Y 
E 
E 


W Y Q D P C J X L L L 
THE 
X G H X E R 0 Q P S E 
E 
E 
TH 
Y g K B W T L F D U Z 


EE 


Z 
0 C D H W M Z T U Z 


AA 
K L B P C J 0 T X E 
T 
THE 
- 


BB 
H S P 0 P N M D L M 


N 


CC Q C K W D V B L S E 
E 
E 
TH 


DD 
Q S U G D P 0 T H X 
E N T H E 


FIGURE 30 


GG 
~ G W N K X J T R li 


HH 
X: T X C D P M V L W 
E 
E 
II B G B W W 0 Q R G N 


JJ H H V L A Q Q V A V 


W I 


KK 
J Q W 0 0 T T N V Q 


LL BK X'D S 0 ZR S !:! 


EE 
T 


MM 
X: U X 0 P P Y 0 X Z 


NN 
H 0 Z 0 W M X C G Q 


00 
J J U G D W Q_R V M 
T H E 


PP 
U K W P E F X E N E 


E 
T 


QQ 
Q C U G D W P E U H 
THE 


RR 
Y B W E W V M D Y J 


SS 
R Z X 
HE 
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ADDITIONAL VALUES FROM ASSUMPTIONS (II) 


12345678910 


Refer to Figure 30, hne A, W F U P C F 0 C J Y, assume to be BUT THOUGH 
--TTH----- 


3 
4 
5 
6 
Refer to Figure 30, Imes N and X, where repetit10n X E R 0 occur•;, assume EACH 


12345678910 


A W F U P C F 0 C J Y 
B U T T H 0 U G H 
B G B Z D P F B 0 U 0 


E 
0 
C G R F T Z M Q M A V 
E 
W I 
D K Z U G D Y F T R Fl 


T H T H E 
E G J X N L W Y 0 U X 
- 
---=- 
E 
E 
F I K W E .e_Q Z 0 K Z 
EA 


G P R X D W L Z I C W 
E 
- 


H G K Q H 0 L 0 D V M 
EE 
u -= 


I g 0 X S N Z H A S E 
E 
E 
T H 


J 
B B J I .e_Q F J H D 


K 
Q C B Z E X Q T X Z 


L J C Q R Q F V M L H 


0 


M S R Q !L_W M L N A ~ 


A 
WH 
N Q S X E R 0 Z J S E 
E N E A C H 
T H 


0 g V Q W E J M K G H 
E 
E 


E - 
- 
- 


12345678910 
1 
2 
3 
4 
5 
6 
7 
8 
9 10 
P R C V 0 P N B L C W 
EE 
B K D Z F M T G Q J 
E 
Q L Q Z A A A M D C H 
FF L F U Y D T Z V !::LQ 


R B Z Z C K Q 0 I K E 


H 
U 


S Q F B S C V X C !:LQ 
U 
H 
G 
T 
~ T Z S D M X W C M 
E 


U R K U H E Q E D G X 
E T 
V F K V H P J J K J Y 
E 
E 
H 
W Y Q D P C J X L L L 
T H E 
X G H X E R 0 Q P S E 
E 
E A C H 
T H 
Y g K B W T L F D U Z 


E E 


Z 0 C D H W M Z T U Z 


AA 
K L B P C J 0 T X E 
T 
THEU-H 


BB 
H S P 0 P N M D L M 


N 


CC g C K W D V B L S E 
E 
E 
TH 


DD 
G S U G D P 0 T H X 
E N T H E u 


FIGURE 31 


UT 
E 


GG 
~ G W N K X J T R N 


HH X T X C D P M V L W 
E 
E 
II B G B W W .Q__Q R G N 
H 
JJ H H V L A Q Q V A V 
W I 


KK 
J Q W 0 0 T T N V Q 


LL 
B K X D S 0 Z R S N 


EE 
H 
T 


MM X U X 0 P P Y 0 X Z 


NN 
H 0 Z 0 W M X C G Q 
-=-G 


00 
J J U G D W Q_B V M 
THE 


PP 
U K W P E F X E N E 


E 
T 
0 


QQ 
Q C U G D W P E U H 
T H E 
RR 
Y B W E W V M D Y J 


A 


SS 
R Z X 
HE 


67 


ADDITIONAL v ALUES FROM ASSUMPTIONS (Ill) 


4 5 6 
OPN-assume ING from repetit10n and frequency 


9 0 l 
HQZ-assume ING from repetit10n and frequency 


1 
2 
3 
4 
5 
6 
7 
8 
g 
10 


A W F U P C F 0 C J Y 
B U T T H 0 U G H 
B G B Z D P F B 0 U 0 


E 
N 0 
C G R F T Z M Q M A V 
E 
W I 
D K Z U G D Y F T R Fl 


TH THE 
E G J X N L W Y 0 U X 
E 
E 
-- 


F I K W E .e_Q Z 0 K Z 
EAN 


G PR~LQWLZICW 
E 
- 
H g K Q H 0 L 0 D V M 
EE 
U 
- 
I g 0 X S N Z H A S E 
E 
E 
TH 


J 
B B J I E....Q. F J H D 
N 
I 
K Q C B Z E X Q T X Z 


L J C 0 R Q F V M L H 


0 


M S R Q E W M L N A ~ 


A - 
W H 
N G S X E R 0 Z J S E 
E N E A c H 
T H 


0 Q V Q W E J M K G H 
E 
E 


12345678910 
P R C V 0 P N B L C W 
I N G 
Q L Q Z A A A M D C H 


R B Z Z C K Q 0 I K [ 


H 
U 
S C F B S C V X C !::LQ 
-u 
H 
GIN 


T 
~ T Z S D M X W C M 
G 
E 


U RKUHEQEDGX 


E T 
V F K V H P J J K J Y 
E 
NE 
H 
W Y Q D P C J X L L L 
THE 
X G H X E R 0 Q P S E 
E 
E A C H 
T H 
Y G K B W T L F D U Z 
EE 
- 


Z 0 C D H W M Z T U Z 


AA 
K L B P C J 0 T X E 
T 
T H E U - 
H 


BB 
H S P 0 P N M D L M 


N 
ING 


CC g C K W D V B L S E 
E 
E 
TH 


DD 
G S U G D P 0 T H X 
E H T H E u I 


FIGURE 32 


1 
2 
3 
4 
5 
6 
7 
8 
9 w 


EE 
B K D Z F M T G Q J 
E 
FF 
L F U Y D T Z V !:LQ 
U T 
E 
I N 


GG 
~ G W N K X J T R N 
G 


HH X T X C D P M V L W 
E 
E 
II B G B W W Q__.Q. R G N 
H 
JJ H H V L A Q Q V A V 
W I 


KK 
J Q W 0 0 T T N V Q 
I 
N 
LL 
B K X D S 0 Z R S N 


EE 
H 
T 


MM 
Y U X 0 P P Y 0 X Z 
- 
- 
-- 
I N 


NN 
H 0 Z 0 W M X C G Q 
I--G N 


00 
J J U G D W Q_B V M 
THE 


pp u K w p E F x E N E 


E 
T 
0 


QQ Q C U G D W P E U H 
THE 


RR 
Y B W E W V M D Y J 
A 
- 


SS 
R Z X 
HE 
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c Ji rom the imhal and subsrqurnt tcntatn e identifications shown m Figures 29, 30, 31, 
and 32, the values obtamed \\ere arranged m the form of the secondary alphabets ma reconstruc- 
tion skeleton, shown m Figure 33 


I 
2 
3 
4 
~ 
6 
7 
8 
0 
10 
11 
12 
13 
14 
15 
16 
17 
18 
10 
20 
21 
22 
23 
24 
215 
2G 


0/AJB co E F G1H rjJjK L MN o P QR s Tiu v w x Yjz 
--------------------------- 
1 
W 
G 
Z 
K 


2f. 
K 
Z 
S 
F 
--------------------------·- 
3 
x 
u 


'----------------------------- 
4 E 
T 
t<. G 0 
p 
~--------------------------- 
5 
R 
D 
c 
p 
--------------------------- 
6 V 
J 
N 0 
F 
'---------------------------'- 
7 
0 
--------------------------- 
8 
c 
--------------------------- 
9 
J H 
s 
A 
--------------------------- 
10 
T E V 


F1ouu 33 


34 Fundamental theory -a In paragraph 31, methods of reconstructing pnmary com- 


ponents from secondary alphabets were given m dctatl It is necessary that those methods be 
fully understood before the followmg steps be studied It was there shown that the primary 
component can be one of a senes of eqmvalent pnmary sequences, all of which wtll give e-,:actly 
sumlar results so far as the secondary alphabets and the cryptographic te-,:t are concerned 
It is not necessary that the identical or ongmal pnmary component employed m the crypto- 
graphmg be reconstructed, any eqmvalent pnmary sequence will serve 
The whole question is 


one of estabhslung a sequence of letters the mterval between which is either identical with that 
m the ongmal pnmary component or else is an exact constant multiple of the mterval separatmg 
the letters m the ongmal pnmary component 
For example, suppose K P X N Q forms a 


sequence m the ongmal pnmary component 
Here the mterval between Kand P, and P and X, 
X and N, N and Q is one, m an eqwvalent primary component, say the sequence K 
P 
X 
N • 
Q, the mterval between Kand Pis three, that between P and X also three, and so on, 
and the two sequences will yield the same secondary alphabets So long as the mterval between 
Kand P, P and X, X and N, N and Q, 
, is a constant one, the sequence wtll be cryptographically 


eqmvalent to the ongmal pnmary sequence and wtll yield the same secondary alphabets as do 
those of the ongmal pnmary sequence 
However, m the case of a 26-letter component, it is 


necessary that this mten al be an odd number other than 13, as these are the only cases which 
will yield one unbroken sequence of 26 letters 
Suppose a secondary alphabet to be as follows 


(l >{Plain___________ A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


Cipher_________ 
X 
K N 
P 
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It can be said that the pnmary component contains the followmg sequences 


XN 
KP 
NQ 
PX 


These, when umted by means of their common letters, yield K P X N Q 
Suppose also the followmg secondary alphabet is at hand 


(2) {Plain___________ A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


Cipher_________ 
P 
X 
K 
N 


Here the sequences PN, XQ, KX, and NZ can be obtamed, which when umted yield the two se- 
quences KXQ and PNZ 


By a companson of the sequences K P X N Q, K X Q, and P N Z, one can estabhsh the 
followmg 


KP X N Q 
K 
X 
Q 


P • N 
Z 


It follows that one can now add the letter Z to the sequence, makmg it K P X N Q Z 
b The reconstruction of a primary component from one of the secondary alphabets by the 
process given m paragraph 31 requires a complete or nearly complete secondary alphabet 
This 1s at hand only after a cryptogram has been completely solved But if one could employ 
several very scant or skeletomzed secondary alphabets simultaneously with the analysis of the 
cryptogram, one could then possibly butld up a pnmary component from fewer data and thus 
solve the cryptogram much more rapidly than would otherwise be possible 
c Suppose only the cipher components of the two secondary alphabets (1) and (2) given 


above be placed mto 1uxtap0Sltion Thus 


1 
2 a ' a a 1 s o w u n a u u ~ u ~ ~ ~ n ~ • M ~ • 


(1) 
X 
K N 
P 
(2J 
P 
X 
K 
N 


The sequenc.,es PX, XN, and KP are given by 3uxtapos1tion 
These, when umted, yield KPXN 


as part of the pnmary sequence 
It follows, therefore, that one can employ the cipher components 
of secondar11 alphabets as sources of independent data to asSlSt m bmldmg up the pnmary sequences 
The usefulness of this pomt will become clearer subsequently 
35 Application of pr1nc1ples -a Refer now to the reconstruction skeleton shown m 


Figure 33 
Hereafter, m order to avoid all ambigmty and for ease m rnference, the poSition of 


a letter m Figure 33 wtll be mdicated as stated m footnote 1, page 56 
Thus, N (6-7) refers to 
the letter N m lme 6 and m column 7 of Figure 33 
b (1) Now, consider the followmg pairs of letters 
E (0-5) 
J (6-5) 
G (0-7) 
N (6-7) 


{ 
H (0-8) 
0 (6-8) } 
_ 
0 (0-15) 
F (6-15) HO, OF-HOF 


(One is able to use the lme marked zero m Figure 33 smce this is a mixed sequence shdmg age.mat 
itself) 
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(2) The munediate results of tlus set of values 'Hll now be given 
Having HOF as a sequence, 


with EJ as belongmg to the same displacement mterval, suppose HOF and EJ are placed mto 
Juxtaposition as portions of shdmg components 
Thus 


Plam_ ____ 
H 0 F 


Cipher____ 
E J 
When Hp=E 01 then OP=J c 


(3) Refer now to alphabet 10, F~we 33, where it is seen that Hp=E 0 
The derived value, 
0p=J 0 , can immediately be wserted in the same alpha.bet anll substituted m the cryptogram 
(4) The student may possibly get a clearer idea of the pnnc1ples mvolved if he will regard 
the matter as though he were dcalmg \\'1t}l ar.thmetical proportion 
For mstance, given any 
three term<! m the proportion 2 8=4 16, the 4th term can easily be found 
Furthermore, given 


the pau of values on the left-hand side of the equation, one may find numerous parrs of 
values whrnh may be mserted m the ne;ht-hnnd side, or vice ver<1a 
For mstance, 2 8=4 16 


is the same as 2 8=5 20, or 9 36=4 16, and so on An illustration of each of these prmc1ples 
will now be given, refe10nce bcmg made to Figure 33 
As an e"'{ample of the first pnnc1ple, note 
that E (0-5) H (0-8)=J (6-5) 0 (6-8) 
Now find E (10-8) H (0-8)=9 (10-15) 0 (0-15) 


It is clear that J may be im.erted as the 3d term m this propmtion, thus givmg the 


10 
important new value, Op= Jc, which is exactly what was obtamed duectly above, by means of 
the partial shdmg components 
As an example of the second pnnc1ple, note the followmg paus 


E (0-5) H (0-8) 
K (2-5) 
Z (2-8) 
D {5-5) 
C (5-8) 
J (6-5) 
0 (6-8) 
These additional pairs are also noted 
K (1-20) 
Z (1-7) 
T t0-20) G (0-7) 


Therefore, E H=K Z=D C=J 0=-T G, and T may be mserted m pos1t1on (4-5) 


c (1) Agam, GN belongs to the same set of displacement-mterval values as do EJ and HOF 


Hence, by superrmpos1hon 


Plam ___ _ 
Cipher ___ _ 
H 0 F 
G N 


(2) Referrmg to alphabet 4, whenHp=G0, then Op=N0 
Therefore, theletterN can be mserted 


4 
m poSitlon (4-15) m Figure 33, and the value N0 =0p can be substituted m the cryptogram 


(3) Furthermore, note the corrob01at10n found from this particular supenmpos1t1on: 


H (0-8) 
0 (6-8) 
G (0-7) 
N (6-7) 


This checks up the value m alphabet 6, GP=N0 
d (1) Agam supenmpose HOF and GN 


(2) Note this corroboration 


H 0 F 
G N 


0 (6-8) 
F (6-15) 
G (4-8) 
N (4-15) 
which has Just been mserted m Figure 33, as stated above 


• 
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e (1) Agam usmg HOF and EJ, but ma different supenmpos1tion 


H 0 F 
E J 
(2) Refer now to H (9-9), J (9-8) 
Directly under the1>e letters is found V (10-9), E (10-8) 


Therefore, the V can be added rmmedmtely before H 0 F 1 makmg the sequence V H 0 F 
J (1) Now take V H 0 F and Juxtapose it with E J, thus 


V H 0 F 
E J 


(2) Refer now to Figure 33, and find the followmg 


V (10-9) 
E (10-8) 


H (9-9) 
J (Q-8) 
0 (4-9) 
G (4-8) 
I (0-9) 
H (0-8) 


(3) From the value 0 Git follows that G can be set next to J m E J 
Thus 


V H 0 F 
E JG 
(4) But G N already IS known to belong to the same set of d1 .. placement-mterval values 
as E J 
Therefore, it is now possible to combme E J 1 J G, and G N mto one sequence, E J G N, 


yieldmg 


g (1) Refer now to Figure 33 


V H 0 F 
E JG N 


v (0-22) 
E (0-5) 
9 (1-22) 
G (1-5) 


9 (2-22) 
K (2-5) 


9 (3-22) 
x (3-5) 


? (5-22) 
D (5-5) 


9 (6-22) 
J (6-5) 


(2) The only values which can be mserted are 


0 (1-22) 
G (1-5) 
H (6-22) 
J (6-5) 


(3) This means that VP=Oa m alphabet 1 and that Vp=Hc m alphabet 6 


m the frequency d1stnbution for alphabet 1, and no Hem that for alphabet 6 
distnbut1on is, therefore, corroborative msofar as these values are concerned 
(h) (1) Further, takmg E J G N and V H 0 F, supenmpose them thus 


(2) Refer now to Figure 33 


E JG N 


VHOF 


E (0-5) 
G (1-5) 
H (0-8) 
? (1-8) 


There is one Oa 
The frequency 
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(3) From the diagram of supenmpoBltion the value G (1-5) F (1-8) can be mserted, which 
gives Hp=F e m alphabet 1 


i 
(1) Agam, V H 0 F and E J G N are Juxtaposed 


• VHOF 
EJGN 
(2) Refer to Figure 33 and find the followmg 


H (0-8) 
G (4-8) 
A (0-1) 
E (4-1) 


This means that it is posS1ble to add A, thus 


(3) In the set there are also 


Then m the superimposition 


AV H 0 F 
E JG N 


E (0-5) 
G (0-7) 


G (1-5} 
z (1-7) 


E JG N 
E JG N 
It IS posS1ble to add Z under G, makmg the sequence E J G N Z 
(4) Then takmg 


and refemng to Figure 33 


AV H 0 F 
.EJGNZ 


H (0-8) 
0 (6-8) 
N (0-14) 


9 (6-14) 
It will be seen that O=Z from supemnpoS1tion, and hence m alphabet 6 Np=Ze, an nnportant 
new value, but occumng only once m the cryptogram 
Has an error been made? The work 
so far seems too corroborative m mterlockmg details to thmk so 


3 (1) The posS1bihties of the supemnposition and shchng of the A VHOF and the EJGNZ 


sequences have by no means been exhausted as yet, but a httle different tratl this time may 
be adVISable 


(2) Then 


(3) Now refer to the followmg 


E (0-5) 
G (1-5) 
K (3-5) 


T (0-20) 
K (1-20) 
u (3-20) 


EJGNZ 
T 
K 


E (0-5) 
K 
(2-5) 
N (0-14) S (2-14) 
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whereupon the value S can be inserted 
.EJGNZ 
• • • T 
K 
• S • 


k (1) ConS1der all the values based upon the displacement mterval corresponding to JG 
J (6-5) G (1-5)- J (9- 8) 
G (4- 8) 
N (6-7) Z (1-7) 
H (9- 9) 
0 (4- 9) 
s (9-20) 
p (4-20)--+ s (2-14) 
p (5-14) 
z (2- 8) c (5- 8) 
K (2- 5) D (5- 5) 


(2) Smee J and G are sequent m the E J G N Z sequence, it can be said that all the letters 
of the foregomg pairs are also sequent 
Hence Z C, S P, and K Dare available as new data 
These give E J G N Z C and T 
K D 
S P 


(3) Now conS1der 


T (0-20} 
A (0- 1) 
H (0- 8) 
I (0- 9) 


p (4-20) 
E (4- 1) 
G (4- 8) 
0 (4- 9) 


123Cli8 


Now m the T 
K D 
S P sequence the mterval between T and P IS T 
P 


Hence the mterval between A and Eis 6 also 
It follows therefore that the sequences A V H 0 F 
and E J G N Z C should be united, thus 


l 
2 8 
' 
Ii 
8 
•• AVHOF.EJGNZC 


(4) Corroboration IS found m the interval between H and G, wluch IS a!so six 
The letter I 
can be placed mto position, from the relation I (0-9) 0 (4-9), thus 


128458 


I 
.AVHOF 
EJGNZC 


l (1) From Figure 33 
H (0- 8) 
E (0- 5) 
N (0-14) 
u (0-21) 


z {2- 8) 
K (2- 5) 
s {2-14) 
F (2-21} 


(2) Smee m the I 
AV H 0 F 
E J G N Z C sequence the letters H and Z are separated 
by 8 mtervals one can wnte 


H 
E 


• • • N 
. • . u 


l 
2 3 ' 
Ii 8 7 8 z 
K 
. . . . s . 


• • F • 
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(3) Hence one can make the sequence 


12841187 8 


~JGNZC 


Then 
and 


I 
I 


y I 


AV H 0 F 
AV H 0 F 
AV HOE 


E J G N Z C T 
EJGNZCT 


K 
KD 
K D 
s p 
§. p 


123411878 
123411878 


m (1) Subsequent derivations can be mdicated very briefly as follows 


E (0-5) 
C (0-3) 


D (5-5) 
R (5-3) 


1 
2 a 4 a 8 
7 s 9 
10 u H u w w re u ~ u ~ n 22 23 24 u a 
FromUI 
AVHOF 
EJGNZCT 
KD 
SP 


one can wnte 
E 
C 


1 
2 
8 
' 
8 


and 
D 
R 


1 
2 
8 
' 
Ii 
makmg the sequence 


i 
2 a 4 
11 
8 
1 s a 10 u H a w ~ re u ~ ~ ~ n ~ 23 24 u 26 
UI 
AVHOF 
EJGNZCT 
KD 
SP 
R 


(2) Another denvation 
u (3-20) 
x (3- 5) 
T (0-20) 
E (0- 5) 


i 
2 a ' 
11 
8 
1 s a 10 u u a w w re u ~ ~ ~ n ~ 23 24 u 26 
FromUI 
AVHOF 
EJGNZCT 
KO 
SP 
R 
one can wnte 


U I 
and 


makmg the sequence 


T 
E 
x 


1 
2 
3 
' 
a a 7 s e 10 u H a w w re u ~ u ~ n ~ 23 24 ~ 26 
UI. 
AVHOF 
EJGNZCT 
KDXSP 
R 


(3) Another denvation 
E (0-5) 
B (0-2) 


From 
E JG 
one can wnte 
E 
G 
and then 
B 
W 


G (1-5) 
w (1-2) 


There is only one place where B 
W can fit, viz, at the end 


1 
2 a 4 a 8 
7 s e 10 u n a w ~ re u ~ u ~ n ~ 23 24 
~ 26 
U I 
A V H 0 F 
E J G N Z C T 
K D X S P ~ R !l 


n Only four letters remam to be placed mto the sequence, viz, L, M, Q, and Y 
Their 
positions are easily found by apphcat10n of the pnmary component to the message 
The com· 


plete sequence is as follows 


1 
2 
3 
4 
5 
6 
7 
8 
9 
10 11 12 13 14 
111 16 17 18 JV 
~ 21 22 23 24 
~ 26 
UIMYAVHOFLEJGNZCTQKDXSPBRW 


I 
I 
' 
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Havmg the pnmary component fully constructed, decipherment of the cryptogram can be 
completed with speed and precJSion 
The text is as follows 


W F U P C F 0 C J Y 
R C V 0 P N B L C W 
BKDZFMTGQJ 
BUTTHOUGHW 
P 0 S I N G T H E S 
S E L F W I L L G 0 


G B Z D P F B 0 U 0 
LQZAAAMDCH 
LFUYDTZVHQ 


ECANNOTASY 
OLARSYSTEM 
0 U T B E C 0 M I N 


GRFTZMQMAV 
B Z Z C K Q 0 I K F 
ZGWNKXJTRN 
ETREVIEWWI 
SHALLTURNA 
GACOLDANDL 


KZUGDYFTRW 
C F B S C V X C H Q 
YTXCDPMVLW 


THTHEMINDS 
NUNCHANGIN 
IFELESSMAS 
GJXNLWYOUX 
ZTZSDMXWCM 
BGBWWOQRGN 
EYEOURPAST 
GFACEINPER 
SANDTHESOL 


I T W E P Q Z 0 K Z 
RKUHEQEDGX 
HHVLAQQVAV 
WECANTOANE 
P E T U I T Y T 0 T 
ARSYSTEMWI 


P R X C W L Z I C W 
FKVHPJJKJY 
J Q W 0 0 T T N V Q 
XTENTFORES 
HESUNEACHW 
LLCIRCLEUN 
GKQHOLODVM 
Y Q D P C J X L L L 
BKXDSOZRSN 
EEOURFUTUR 
ILLTHENHAV 
SEENGHOSTL 
GOXSNZHASE 
GHXEROQPSE 
YUXOPPYOXZ 
EWECANWITH 
EREACHEDTH 
IKEINSPACE 


B B J I P Q F J H D 
GKBWTLFDUZ 
HOZOWMXCGQ. 
S C I E N T I F I C 
E E N D 0 F I T S E 
A W A I T I N G 0 N 


QCBZEXQTXZ 
OCDHWMZTUZ 
JJUGJWQRVM 


C 0 N F I D E N C E 
V 0 L U T I 0 N S E 
LYTHERESUR 


JCQRQFVMLH 
K L B P C J 0 T X E 
UKWPEFXENF 
LOOKFORWAR 
T I N T H E U N C H 
R E C T I 0 N 0 F A 


SRQEWMLNAE 
HSPOPNMDLM 
CCUGDWPEUH 
DTOATIMEWH 
ANGINGSTAR 
NOTHERCOSM 
GSXEROZJSE 
GCKWDVBLSE 
YBWEWVMDYJ 
ENEACHOFTH 
EOFDEATHTH 
I C C A T A S T R 0 
GVQWEJMKGH 
GSUGDPOTHX 
RZX 


E B 0 D I E S C 0 M 
ENTHESUNIT 
PH E 


FIGVB:t. 34 


o The pnmary component appears to be a random-mn:ed sequence, no key word is to be 
found, at least none reappears on expenmentation with vanous hypotheses as to eumphenng 
equations 
Nevertheless, the random construe tion of the pumary component did not comph· 


cate or retard the solution 
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REPEATING-KEY SYSTEMS WITH MIXED CIPHER ALPHABETS, III 


Paragraph 
Solution of messages enciphered by known pnmary components __ ----------------- --------------------------- ___ 
37 


Solution of repeating-key ciphers m v.hrnh the 1dei1t1cal m1 ... ed components proceed m opposite directions______ 
38 


Solution of repeating-key ciphers m v.hid1 the pnman (,ompouents are different mlll.ed sequences_______________ 
39 


Solution of subsequent messages after the primary components have been recovered..________________________________ 
40 


37 Solution of subsequent messages enciphered by the same pnmary components -a In 
the d1scuss1on of the methods of solvmg repeating-key ciphers usmg secondary alphabets denved 
from the shding of a mixed component agamst the normal component (Section V), it was shown 
how subsequent messages enciphered by the same pair of pnmary components but with different 
keys could be solved by apphcation of pnnciples mvolvmg the completion of the plain-component 
sequence (paragraphs 23, 24) 
The present paragraph deals with the application of these same 
pnnc1ples to the case where the pnmary components are identical ID1Xed sequences 
b Suppose that the followmg primary component has been reconstructed from the analysis 


of a lengthy cryptogram 


Q U E S T I 0 N A B L Y C D F G H J K M P R V W X Z 


A new message exchanged between the same correspondents is mtercepted and is suspected 
of havmg been enc1pheicd by the same pnm.uy components but with a different key 
The 
message is as follows 


N F W W P 
N 0 M K I 
W P I D S 
C A A E T 
Q V Z S E 


Y 0 J S C 
A A A F G 
R V N H D 
W D S C A 
E G N F P 


F 0 E M T 
H X L J W P N 0 M K 
I Q D B J 
I V N H L 


T F N C S 
B G C R P 


c Factonng discloses that the per10d is 7 letters 
The text is transcnbed accordingly, and 


is as follows 


NFWWPNO 
M K I W P I D 
S C A A E T Q 
VZSEYOJ 
SCAAAFG 
RVNHDWD 
S C A E G N F 
PFOEMTH 
X L J W P N 0 
MKIQDBJ 
I V N H L T F 
N C S B G C R 
p 


FIGUBll 37 
(78) 
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d The letters belongmg to the same alphabet are then employed as the m1tial letters of 


completion sequences, m the manner shown m paragraph 23e, usmg the already reconstructed 
pnmary component The completion diagrams for the first five letters of the first three alphabets 
are as follows 


ALPBABllT 1 
ALPJUBllT 2 
ALPBABllT 3 
NM S VS 
F K C Z C 
W I A S A 


APT WT 
GM D Q D 
X 0 B T B 
B R I X I 
HP FU F 
Z N L I L 
L V 0 Z 0 
JR GE G 
QA Y 0 Y 
YWNQN 
KV HS H 
U B C N C 
C X AU A 
MWJTJ 
ELD AD 
DZ BE B 
PX KI K 
SY F BF 
F Q LS L 
R Z M 0 M 
T C G L G 


GUY TY 
V Q P N P 
ID HY H 
*H E C I C 
WU RA R 
0 F J CJ 
J S D 0 D 
XE VB V 
NGKDK 
KT F NF 
ZS W L W 
AHMFM 
MIG AG 
QT X Y X 
BJ PG P 
P 0 H B H 
U I Z C Z 
LKRHR 
RN J L J 
E 0 Q D Q 
Y M VS V 
VAKYK 
SN U FU 
C PW KW 
W BMC M 
TA EGE 
DRXMX 
XL PDP 
I B S H S 
F V Z P Z 
ZYRFR 
0 LT J T 
G W QR Q 
QC VG V 
NY I KI 
HXUVU 
UDWHW 
*A C 0 M 0 
J Z EWE 
E F X J X 
B D NP N 
KQSXX 
S G Z K Z 
LFARA 
MUTZ T 
TH QM Q 
Y GB VB 
PE IQ I 
I JU PU 
CH L W L 
RS 0 U 0 
0 KER E 
DJYXY 
*V T N E N 


FIOUBll 38 
e Exammmg the successive generat1ves to sele<'t the ones showmg the best assortment of 


high-frequency letters, those marked m Figure 38 by asterisks are chosen 
These are then assem- 


bled m columnar f ash1on and yield the followmg plam text 


1 
2 
3 
4 
5 
6 
7 


HAV 
E C T 
C 0 N 
I M E 
C 0 N 


FiGUBll39 
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f The corresponding key-letters are sought, usmg enciphenng equations 9ii:ta=9ilP, 9ii1P= 
9c10, and are found to be JOU, which suggests the keyword JOURNEY 
Testmg the key-letters 
RNEY for alphabets 4, 5, 6, and 7, the followmg results are obtained 


1 
2 3 
' 
6 
6 
7 
JOURNEY 
NFWWPNO 
HAVEDIR 
SCAAETQ 
ECTEDSE 


J'IOUBJ: 40 


The message may now be completed with ease It is as follows 


JOURNEY 
HAVEDIR 
NFWWPNO 
ECTEDSE 
MKIWPID 
CONDREG 
SCAAETQ 
IMENTTO 
VZSEYOJ 
C 0 N D U C T 
SCAAAFG 
THORORE 
RVNHDWD 
CONNAIS 
SCAEGNF 


FIOUBB 41 


JOURNEY 
S A I N C E I 
PFOEMTH 
NTHEDIR 
XLJWPNO 
ECTIONO 
MKIQDBJ 
FHORSES 
IVNHLTF 
HOEFALL 
NCSBGCR 
s 
p 


38 Solution of repeating-key ciphers m which the identical llllxed components proceed m 
opposite dlreotlons.-The secondary alphabets m this case (paragraph 6, Case B (3) (a) (II) 
are reciprocal 
The steps m solution are essentially the same as m the preceding case (para- 


graph 28), the pnnciples of indirect symmetry of poSltion can also be apphed with the necessary 
modifications mtroduced by virtue of the reciprocity existing within the respective secondary 
alphabets (paragraph 31p) 
39 Solution of repeatmg-key ciphers in which the pnmary components are dlft'erent mixed 


sequences.-Th1s is Case B (3) (b) of paragraph 6 The steps m solution are essentially the same 
as m paragraphs 28 and 31, except that m applying the pnnciples of mdirect symmetry of posi- 
tion it JS necessary to take cogmzance of the fact that the pnmary components are different 
mixed sequences (paragraph 31q) 
40 Solution of subsequent messages after the primary components have been recovered.- 
a In the case m which the pnmary components are identical mixed sequences proceeding m 
oppoSlte directions, as well as m that m which the pnmary components are ddferent mixed 
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sequences, the solution of subsequent me<Jsages 11s a relatively easy matter In both cases, how- 
ever, the student must remember that before the method illustrated in paragraph 37 can be 
apphed it is necessary to convert the cipher letters into their plain-component equivalents 
before completing the plain-component sequence From there on, the process of selecting and 
assemblmg the proper generatnces is the same as usual 
b Perhaps an example may be advisable Suppose the enemy has been found to be using 


pnmary components based upon the keyword QUESTIONABLY, the plain component runmng 
from left to nght, the cipher component in the reverse direction 
The following new message 
has arnved from the intercept station 


MVXOX 
B Z I Y Z 
NLWZH 
0 X I E 0 
0 0 E P Z 


FXSRX 
E JBS H 
B 0 NAU 
RAP Z I 
NRAMV+ 


XO X A I 
J Y X W F 
KN D 0 W 
J ER CU 
RA L v L 
t 


~A Q U W 
J W X YI 
DGRKD 
QBDRM 
Q EC Y V 


Q w 


121•111 
MVXOXB 
ZIYZNL 
WZHOXI 
E 0 0 0 E P 
ZFXSRX 
EJBSHB 
ONA URA 
PZINRA 
MVXOXA 
IJYXWF 
KNDOWJ 
ER CURA 
LVBZAQ 
UWJWXY 
IDGRKD 
QBDRMQ 
ECYVQW 


c Factonng discloses that the penod is 6 and the mes- 


sage is accordmgly transcnbed mto 6 columns, Fig 42 
The letters of these columns are then converted mto their 
plam component eqmvalents by JUXtaposmg the two pn- 
mary components at any pomt of comc1dence, for ex- 
ample Qp=Z, The converted letters are shown m Fig 43 
The letters of the md1vidual columns are then used as the 
1mt1al letters of completion sequences, usmg the 
QUESTIONABLY primary sequence 
The final step is the 


selection and assembhng of the selected generatnces 
The results for the first ten letters of the first three columns 
are shown below 


l 
2 
8 
4 
II 
11 
OSUMUH 
QPFQKG 
EQBMUP 
WMMMWI 
QYUVTU 
WAHVBH 
MKJXTJ 
IQPKTJ 
OSUMUJ 
PAFUEY 
NKCMEA 
WTDXTJ 
GSHQJZ 
XEAEUF 
PCLTNC 
ZHCTOZ 
WDFSZE 


1 That is, messages intercepted after the primary components have been reconstructed and enciphered by 
keys chfferent from those used m the messages upon which the reconstruction of the pnmary components was 
accompbshed 


COLUllN l 


0 Q E W Q W M I 0 P 
NUSXUXPONR 
AETZEZRNAV 
B S I Q S Q V A B W 
LTOUTUWBLX 
Y I N E I E X L Y Z 
C 0 A S 0 S Z Y C Q 
D N B T N T Q C D U 
*F A L I A I U D F E 
G B Y 0 B 0 E F G S 
HLCNLNSGHT 
J Y D A Y A T H J I 
K C F B C B I J K 0 
MDGLDLOKMN 
PFHYFYNMPA 
R G J C G C A P R B 
VHKDHDBRVL 
WJMFJFLVWY 
XKPGKGYWXC 
ZMRHMHCXZD 
Q P V J P J D Z Q F 
URWKRKFQUG 
EVXMVMGUEH 
SWZPWPHESJ 
TXQRSRJSTK 
I Z U V Z V K T I M 
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00L'l1XN' 2 
SPQMYAKQSA 
TRUPCBMUTB 
*I V E R D L P E I L 
0 W S V F Y R S 0 Y 
NXTWGCVTNC 
AZIXHDWIAD 
B Q 0 Z J F X 0 B F 
LUNQKGZNLG 
YEAUMHQAYH 
C S B E P J U B C J 
DTLSRKELDK 
FIYTVMSYFM 
G 0 C I W P T C G P 
HNDOXRIDHR 
JAFNZVOFJV 
KBGAQWNGKW 
MLHBUXAHMX 
P Y J L E Z B J P Z 
RCKYSQLKRQ 
VDMCTUYMVU 
W F P D I E C P W E 
XGRFOSDRXS 
ZHVGNTFVZT 
Q J W H A I G W 0 I 
UKXJBOHXUO 
EMZKLNJZEN 


FIGUBB 44 


COLVKN 3 


UFBMUHJPUF 
EGLPEJKREG 
SHYRSKMVSH 
TJCVTMPWTJ 
I K D W I P R X I K 
OMFXORVZOM 
NPGZNVWQNP 
ARHQAWXUAR 
BVJUBXZEBV 
LWKELZQSLW 
YXMSYQUTYX 
C Z P T C U E I C Z 
D Q R I D E S 0 D Q 
FUVOFSTNFU 
G E W N G T I A G E 
HSXAHIOBHS 
J T Z B J 0 N L J T 
K I Q L K N A Y K I 
MOUYMABCMO 
P N E C P B L D P N 
*R A S D R L Y F R A 
VBTFVYCGVB 
WLIGWCDHWL 
XYOHXDFJXY 
ZCNJZFGKZC 
QDAKQGHNQD 


Columnar assembhng of selected generatrices gives what is shown m Fig 45 


1 
2 
3 
4 s 6 
F I R 
AVA 
LES 
IR D 
ADR 
I L L 
up y 
DEF 
F I R 
EL A 


FIGURB 46 


I 
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d The key letters are sought, and found to be NUM, which suggests NUMBER 
message may now be read with ease 
It is as follows 
N U 'M B E R 
F I R S T C 
MVXOXB 
AVAL RY 
Z I Y Z N L 
LESS TH 
WZHOXI 
IRDSQU 
E 0 0 0 E P 
ADRONW 
ZFXSRX 
I L L 0 C C 
EJBSHB 
UPYAND 
ONA URA 
DEFEND 
PZINRA 
FIRSTD 
MVXOXA 


F!GUBB 46 


NUMBER 
E L A Y I N 
IJYXWF 
G P 0 S I T 
KNDOWJ 
I 0 N A N D 
ER CURA 
W I L L P R 
LVBZAQ 
0 T E C T L 
UWJWXY 
EFTFLA 
IDGRKD 
NKOFBR 
QBDRMQ 
IGADEX 
ECYVQW 


The entire 


e If the pnmary components are different nuxed sequences, the procedure is identical VI ith 


that ust mdlcated 
The important pomt to note is that one must not fail to convert the letters 


mto !heir plam-component eqwvalents before the completion-sequence method is applied 
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REPEATING-KEY SYSTEMS WITH MIXED CIPHER ALPHABETS, IV 
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_ ____ --------------------------- 
45 
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41 General remarks-The precedmg three sections have been devoted to an elumdation 


of the general prmciples and procedure m the solution of typical cases of repeatmg-key ciphers 
This section will be devoted to a consideration of the vanatlons m cryptanalytw procedure ansmg 
from special cll'cumstances 
It may be well to add that by the designation "sperial circum- 


stances" it is not meant to rmply that the latter are necessarily unu8'Ual circumstances 
The 


student shouJ,d always be on the alert to seize upon any opportunities that may appear in which he may 
apply the methods to be described 
In practical work such opporturuhes are by no means rare and 
are seldom overlooked by competent cryptanalysts 


42 Denvmg the secondary alphabets, the pnmary components, and the key, given a 


cryptogram with its plain text -a It may happen that a cryptogram and its eqmvalent plain 
text are at hand, as the result of capture, pilferage, comp10m1se, etc 
This, as a general rule, 
affords a very easy attack upon the whole system 
b Talang first the case where the plam component is the normal alphabet, the cipher com- 


ponent n. mixed sequence, the first thmg to do is to write out the cipher text with its lettcr-for- 
letter decipherment 
From this, by a shght mod1ficatlon of the prmciples of "factonng", one dis- 


covers the length C\f the key 
It is obvious that when a word of three or four letters is enciphered 
by the same cipher text, the mterval between the two occurrences is ahnost certamly a multiple 
of the length of the key 
By noting a few recurrences of plam text and cipher letters, one can 
qmckly determme the length of the key (assummg of course that the message is long enough to 
afford sufficient data) 
Having determined the length of the key, the message is rewntten accord- 
mg to its penods, with the plam text hkewise m penods under the cipher letters 
From this 


arrangement one can now reconstruct complete or partial secondary alphabets If the secondary 
alphabets are complete, they will show direct symmetry of position, If they are but fragmentary 
m several alphabets, then the pnmary component can be reconstructed by the apphcation of the 
prmc1ples of dll'ect synunetry of poS1t1on 
c If the plam component is a mIXed sequence, and the cipher component the normal (dU'ect or 
reversed sequence), the secondary alphabets will show no direct svmmctry unless they are ar- 
ranged m the form of dec1phenng alphabets (that is, A0 
Z0 above the zero lme, with thell' 
eqmvalents below) 
The student should be on the lookout for such cases 
d (1) If the plam and cipher pnmary components are 1dent1cal In1Xed sequences proceedmg 
m the same dU'ection, the secondary alphabets will show mdirect symmetry of pos1t1on, and they 
can be used for the speedy reconstruction of the pnmary components (Paragraph 31a too) 
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(2) If the plam and the cipher pnmary components are 1dent1cal mixed sequences proceedmg 
m opposite directions, the secondary alphabets will be completely reciprocal secondary alphabets 
and the pnmary component may be reconstructed by applymg the pnnc1ples outlmed m para- 
graph 31p 
(3) If the plam and the cipher pnmary components are different mixed sequences, the 
secondary alphabets will show mdirect symmetry of pos1t1on and the pnmary components may 
be reconstructed by applymg the prmciples outlmed m paragraph 31q 
e In all the foregomg cases, after the pnmary components have been reconstructed, the 
keys can be readily recovered 
43. Dennng the secondary alpha.bets, the pnma.ry components, and the keywords for 
messages, given two or more cryptograms in dl:fferent keys and suspected to contain identical 
pla.In text -a The Simplest case of this kmd is that mvolvmg two monoalphabetic subst1tut1on 
ciphers with mIXed alphabets denved from the same pair of shdmg components 
An understand- 
mg of this case is necessary to that of the case mvolvmg repeating-key ciphers 


b (1) A message 18 transmitted from station A to station B 
B then sends A some operatmg 


SigDals which mdicate that B cannot decipher the message, and soon thereafter A sends a sec.ond 
message, identical m length with the first 
This leads to the susp1c1on that the plam text of both 
messages 1S the same 
The mtercepted messages are supenmposed 
Thus 
f I \/ ~ i; t u A 1)/2. 0,, s #' I.I s Tr I:. I 
A, p ,, ~ 
,, " t 'I' hp t ' 
.. ' ' ' 'l 
~ ,., ,.) -r 
A .. ,. A ' '" .. w;.. r ' t c 


1 NXGRV MPUOF ZQVCP VWERX QDZVX WXZQE TBDSP VVXJK RFZWH ZUWLU IYVZQ FXOAR 
2 EMLHJ FGVUB PRJNG JKWHM RAPJM KMPRW ZTAXG JJMCD HBPKY PVKIV QOJPR BMUSH 


(2) Irutiating a cham of cipher-text eqmvalents from message 1 to message 2, the followmg 
complete sequence is obtamed 


1 2 3 ' 
I 
6 7 8 9 ro ll H u u H H n ~ ~ ~ ~ ~ ~ ~ ~ ~ 
NEWKDASXMFBTZPGLIQRHYOUVJC 


(3) Experimentation along already-mdicated hnes soon discloses the fact that the foregoing 


component is an eqmvalent primary component of the original pnmary based upon the keyword 
QUESTIONABLY, decrmated on the 21st mterval Let the student decipher the cryptogram 
(4) The foregoing example is somewhat artificial m that the plam text was consciously 
selected with a view to makmg it contam every letter of the alphabet 
The purpose m domg 


this was to permit the construction of a complete cham of eqwvalents from only two short 
messages, m order to give a Sl.IIl.ple illustration of the prmc1ples mvolved If the plam-text message 
does not contam every letter of the alphabet, then only partial chams of eqmvalents can be con- 
structed 
These may be uruted, if cll'cumstances will pernut, by recourse to the vanous prm- 


c1ples elucidated m paragraph 31 
(5) The student should carefully study the foregoing example m order to obtam a thorough 
comprehenSlon of the reason why it was possible to reconstruct the pnmary component from the 
two cipher messages without having any plam text to begin with at all 
Smee the plam text of 
both messages 1S the same, the relative displacement of the pnmary components m the case of 
message 1 differs from the relative displacement of the same pnmary components m the case of 
message 2 by a fized mterval 
Therefore, the dIStance between N and E (the first letters of the 
two messages), on the pnmary component, regardless of what plam-text letter these two 
cipher letters represent, 18 the same as the distance between E and W (the 18th letters), Wand K 
(the 17th letters), and so on Thus, this fixed mterval permits of estabhshing a complete cham 
of letters separated by constant mtervals and thIS cham becomes an equivalent pnmary com- 
ponent. 


86 


44 The case of repeating-key systems -a With the foregomg basic pnnmples m mmd 
the student is ready to note the procedure m the case of two repeatmg-key mphers having identical 
plam te-.rts First, the case m which both messages have keywords of identical length but different 
compos1t1ons will be studied 


b (1) Given the following two cryptograms suspected to contam the same plam text 


Y HYE X 
UBUKA 
P C Q T U 
NGK FA 
TR 0 Q S 
UHAFK 


C G S L Z 
QUBMN 
MT A IQ 
Z WM D Q 


VS NZ R 
B J N 0 Q 


MESSAGE 1 


P V L L T 
Z E FI Z 


MESSAGE 2 


CT YB V 
NS D W N 


ABU V V 
B D J E Z 


H L Q FT 
L C B L Q 


DYS AB 
A L V I D 


FL RH L 
N E T 0 C 


(2) The first step is to try to determme the length of the period 
The usual method of 
factonng cannot be employed because there are no long repetitions and not enough repetitions 
even of digraphs to give any convmcmg mdicat1ons 
However, a subterfuge will be employed, 
based upon the theory of faetonng 


c (1) Let the two messages be supenmposed 


1 2 8 4 6 6 7 8 9 W U U U M M ~ U ~ ~ ~ 


1 YHYEXUBUKAPVLLTABUVV 
2 CGSLZQUBMNCTYBVHLQFT 


fil~~~~z~~~oon~~M~oo~~~~ 


1 DYSABPCQTUNGKFAZEFIZ 
2 FLRHLMTAIQZWMDQNSDWN 


~~@«~~~~~roM~MMMMMM~OO 


1 BDJEZALVIDTROQSUHAFK 
2 LCBLQNETOCVSNZRBJNOQ 


4 
" 
E 
E 
(2) Now let a search be made of cases of identical supenmposit1on For example, Land L 
6 
18 
00 


u u 
u 
are separated by 40 letters, Q, Q, and Q are separated by 12 letters Let these mtervals between 
identical superunpos1t1ons be factored, 1ust as though they were ordmary repetitions 
That 
factor which is the most frequent should correspond with the length of the penod for the following 
reason If the penod is the same and the plam text is the same m both messages, then the con- 
dition of identity of superunpos1t1on can only be the result of identity of encipherments by 
identical cipher alphabets This is only another way of saymg that the same relative poBltion m 
the keymg cycle has been reached m both cases of identity 
Therefore, the distance between 


identical supenmposit1ons must be either equal to or else a multiple of the length of the penod 
Hence, factoring the mtervals must yield the length of the penod The complete hst of mtervals 
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and factors apphcable to cases of 1dentmal supenmposed pairs is as follows (factors above 12 
are omitted) 


Repetition 
Interval 
Factors 
Repet1t1on 
Interval 
Factors 
-- 


1st EL to 2d EL.. 
----- 
40 
2, 4, 5, 8, 10 
1st TV to 2d TV. -- 
36 
2, 3, 4, 6, 9, 12 
1st UQ to 2d UQ - --- - 
12 
2, 3, 4, 6, 12 
1st AH to 2d AH. ---- 
8 
2, 4, 8 
2d UQ to 3d UQ 
12 
2, 3, 4, 6, 12 
1st BL to 2d BL 
-- 
8 
2, 4, 8 


1st UB to 2d UB 
48 
2, 3, 4, 6, 8, 12 
2d BL to 3d BL 
---- 
16 
2, 4, 8 
1st KM to 2d KM. 
- 
24 
2, 3, 4, 6, 8, 12 
1st SR to 2d SR. -- 
32 
2, 4, 8 
1st AN to 2d AN - 
-- 
36 
2, 3, 4, 6, 9, 12 
1st FD to 2d FD. -- 
4 
2, 4 


2d AN to 3d AN 
- 
12 
2, 3, 4, 6, 12 
1st ZN to 2d ZN - 
4 
2,4 
1st VT to 2d VT ------- 
8 
2, 4, 8 
1st DC to 2d DC.. • 
8 
2, 4, 8 
2d VT to 3d VT. _ 
- 
28 
2, 4, 7 


(3) The factor 4 is the only one common to every one of these mtervals and it may be taken 
as beyond question that the length of the penod is 4 
d Let the messages now be supenmposed accordmg to their penods 


1 
2 
3 
4 
1 
2 
3 
4 
1 
2 
3 
4. 
1 
2 
3 
4 
1 
2 
3 
4. 
1 
2 
3 
4 
1 
2 
3 
4 


1 YHYE 
XUBU 
KAP V 
LL TA 
BU V V 
DYS A 
B P C Q 
2 
C G S L 
Z Q U B 
MN CT 
YB V H 
L Q F T 
FLRH 
L MT A 


1 TUNG 
K FAZ 
E F I Z 
B DJ E 
Z AL V 
I D T R 
0 Q s u 
2 
I Q Z W MD Q N 
SD W N 
L C B L 
Q NET 
0 c vs 
NZRB 


1 HAFK 
2 
J N 0 Q 
e (1) Now d1stnbute the supenmposed letters mto a reconstruction skeleton of "secondary 


alphabets " 
Thus 


0 A B c DIE F G H I J K L M N 0 p Q R s T u v w x y z 
- - - - - - - - - - - - - - - - - - - - - - - - - - - 
1 
L 
F s 
J 0 
M y 
N 
I 
z c Q 
- - - 
- - - - 
- - - - 
- 
- 
- 
- 
- 
- - 
- 
- 
- 
- 
- 
- 
- 
- 
- 
2 N 
c 
D 
G 
B 
M z 
Q 
L 
- - - 
- 
- - - - - 
- 
- 
- 
,__ - 
- - - - 
- 
- 
- - 
- - 
- 
- - 
3 Q u T 
0 
w B 
E 
z 
c 
R v 
F 
s 
- - 
- 
- 
- 
- 
- - - - - 
- - - 
- - 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
4 H 
L 
w 
Q 
A s 
B T 
N 


(2) By the usual methods, construct the pnmary or an eqmvalent pnmary component 


Takmg hnes 0 and 1, the followmg sequences are noted 


BL, 
DF, 
ES, 
HJ, 
IO, 
KM, 
LY, 
ON, 
TI, 
XZ, 
YC, 
ZQ, 


which, when umted by means of common letters and study of other sequences, yield the complete 
ongmal pnmary component based upon the keyword QUESTIONABLY 
QUESTIONABLYCDFGHJKMPRVWXZ 


(3) The fact that the pair of hnes with which the process was commenced yield the or1gmal 
pnmary sequence is purely accidental, it might have 1ust as well yielded an equivalent pnmary 
sequence, 
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f (1) Having the pnmary component, the solution of the messages 1s now a relatively mmple 


matter 
An apphcat1on of the method elucidated m paragraph 37 1s made, mvolvmg the comple- 
tion of the plam-component sequence for each alphabet and selecting those generatnces wb.Ich 
contam the best assortments of b.Igh-frequency letters 
Thus, usmg Message 1 


l'DIBT .ALPJIABBT 
SECOND ALPHABET 
TBIBD ALPHABET 
FOURTH ALPHABBT 


YXKLB 
HUA LU 
YBPTV 
EUVAV 


CZ MY L 
J EBY E 
C L R I W 
SEW B W 
D Q PC Y 
KS LC S 
DYVOX 
TS XL X 
FUR DC 
MTYDT 
F CW NZ 
IT Z Y Z 


GE VF D 
P I C F I 
GDXAQ 
0 I Q C Q 


HS W G F 
R 0 D G 0 
HFZBU 
NOUDU 


JTXHG 
VNFHN 
JGQLE 
*A N E F E 
KI Z J H 
WAGJA 
KHUYS 
BAS GS 


M 0 Q K J 
XBHKB 
M J EC T 
LBTHT 


PNUMK 
ZLJML 
PK SD I 
Y L I J I 
RAE PM 
QYKPY 
RMTFO 
C Y 0 K 0 
VB SR P 
UCMRC 
VP I G N 
DCNMN 
WLTVR 
EDPVD 
WROHA 
FD APA 
X YI WV 
SFRWF 
XVNJB 
GFBRB 
z c 0 x w 
TGVXG 
ZWAKL 
HGLVL 


QDNZX 
IHWZH 
QXBMY 
JHYWY 


UFAQZ 
OJXQJ 
U Z LP C 
K JC X C 
E GB U Q 
NKZUK 
E Q YR D 
MKDZD 


SH LEU 
AMQEM 
SU CV F 
PM F Q F 
T J Y SE 
BP USP 
TEDWG 
RPGUG 


I K C T S 
*L R E T R 
IS F X H 
VRHEH 
0 M D I T 
Y VS IV 
0 T G Z J 
w v J s J 
N P F 0 I 
CWT 0 W 
NIH Q K 
XWKTK 
*A R G N 0 
DXINX 
A 0 JU M 
ZXMIM 
BVHAN 
F Z 0 AZ 
BNKEP 
Q z p 0 p 
L W J BA 
GQNBQ 
*LAMS R 
UQRNR 


F!GUBB 48 


(2) The selected generatnces (those marked by astensks m Fig 48) are assembled m 


columnar manner 
ALLA 
RRAN 
GEME 
NT SF 
ORRE 


F!GVU 411 
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(3) The key letters are sought and give the keyword SOUP 
The plam text for the second 
message 1s now known, and by reference to the cipher text and the pnmary components, the 
keyword for th.Is message 1s found to be TIME 
The complete texts are as follows 


SOUP 
TIME 
ALLA 
ALLA 
YHYE 
CGSL 


RRAN 
RRAN 


XUBU 
ZQUB 


GEME 
GEME 
KAPV 
MNCT 


NTSF 
NTSF 


LLTA 
YBVH 
ORRE 
0 RR E 


BUVV 
L Q FT 
LIEF 
LIEF 


DYSA 
FLRH 


OF Y 0 
0 FY 0 
BP C Q 
LMTA 


UROR 
UROR 
TUNG 
IQ Z W 
GANI 
GAN I 
KFAZ 
MDQN 


ZATI 
Z AT I 
EFIZ 
SDWN 
ONHA 
ONHA 
BOJE 
LC BL 
VEBE 
VE BE 
ZALV 
QNET 


ENSU 
ENS U 


IDT R 
0 c vs 


SP EN 
SP EN 


0 Q s u 
NZRB 


DEDX 
DEDX 


HAFK 
JNOQ 


FiG'llBli liO 


46 The case of identical messages enciphered by keywords of dlft'erent lengths -a In the 
foregomg case the keywords for the two messages, although drlferent, were identical m length 
When th.Is 18 not true and the keywords are of different lengths, the procedure need be only 
slightly modified 
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b Given the followmg two cryptograms suspected of contammg the same plam-text en- 


ciphered by the same prunary components but with dJ.ff erent keywords of dJ.ff erent lengths, solve 
the messages 


MESSAGE No 1 


V MY Z G 
EAU NT 
PK FAY 
JI Z MB 
UMYKB 
VF IV V 
S E 0 A F 
SKXKR 
YWCA C 
Z 0 R D 0 
ZR DEF 
BL K FE 


SM KS F 
AF EK V 
Q UR CM 
y z v 0 x 
VA BT A 
Y Y U -0 A 
YT DK F 
EN W NT 
DB Q KU 
L A J L Z 
I 0 UM A 
B 0 A F S 


K X Q PU 
Y M JP W 
QT DB T 
0 5 I Y S 
MI Y KU 
R 0 GM W 
C T M Z Z 
VMVAJ 
MESSAGE No 2 


Z GA MW 
I 0 M 0 A 
C 0 D H A 
C L R L P 
M 0 Q 0 J 
EM 0 Q U 


DH X BY 
UQMGA 
UV G L Q 
DBS PU 
0 A B I R 
PWXYM 
0 G G F T 
MR H VF 
G WK NI 
VA UP F 
AB RV I 
LA Q EM 
Z DJ X Y 
MED DY 
B 0 S V M 
P NL G X 
X DY D 0 
PX BY U 
QMNKY 
FLU Y Y 
G VP V R 
D NC Z E 
K J Q 0 R 
WJXRV 
GD K D S 
X C E E C 


c The messages are long enough to show a few short repetitions which permit factonng 


The latter discloses that Message 1 has a period of 4 and Message 2, a period of 6 letters The 
messages are supenmposed, with numbers markmg the position of each letter m the correspondmg 
penod, as shown below 


No 1 
No 2 


No 1 
No 2 


No 1 
No 2 


No 1 
No 2 


No 1 
No 2 


No 1 
No 2 


1 
2 
3 
4 
1 
2 
3 
4 
1 
2 
3 
4 
1 
2 
3 
4 
1 
2 
3 
4 
1 
2 
3 
4 


VMYZGEAUNT PKFAYJ I ZMBUMYK 
ZGAMWIOMOACODHACLRLPMOQO 
1 
2 
3 
4 
6 
6 
1 
2 
3 
4 
6 
6 
1 
2 s 4 
5 
6 
1 
2 
3 
4 
5 
6 


1 
2 
3 
4 
1 
2 s 4 
1 
2 
3 
4 
1 
2 
3 
4 
1 
2 
3 
4 
1 
2 
3 
4 
BVFIVVSEOAFSKXKRYWCACZOR 
JEMOQUDHXBYUQMGAUVGLQDBS 
1 
2 
3 
4 
5 
6 
1 
2 
8 
4 
5 
6 
1 
2 
3 
4 
6 
6 
1 
2 
3 
4 
6 
6 


1 
2 
3 
4 
1 
2 
3 
4 
1 
2 
3 
4 
1 
2 
3 
4 
1 
2 
3 
4 
1 
2 
3 
4 
DOZRDEFBLKFESMKSFAFEKVQU 
PUOABIRPWXYMOGGFTMRHVFGW 
1 
2 
3 
' 
6 
6 
1 
2 
3 
4 
5 
6 
1 
2 
3 
4 
5 
6 
1 
2 
3 
4 
5 
6 


1 
2 
3 
4 
1 
2 
3 
4 
1 
2 
3 
4 
1 
2 
3 
4 
1 
2 
3 
4 
1 
2 
3 
4 
RCMYZVOXVABTAYYUOAYTDKFE 
KNIVAUPFABRVILAQEMZDJXYM 
1 
2 
3 
4 
5 
6 
1 
2 
3 
4 
6 
6 
1 
2 
3 
4 
5 
6 
1 
2 
3 
4 
5 
6 


1 
2 
3 
4 
1 
2 
3 
4 
1 
2 
8 
' 
1 
2 
3 
4 
1 
2 
3 
4 
1 
2 
3 
4 
NWNTDBQKULAJLZIOUMABOAFS 
EDDYBOSVMPNLGXXDYDOPXBYU 
l 
2 
3 
4 
6 
6 
1 
2 s 4 
6 
6 
1 
2 
3 
4 
5 
6 
1 
2 
3 
4 
6 
6 


1 
2 
3 
4 
l 
2 
3 
4 
1 
2 
3 
4 
1 
2 
3 
' 
1 
2 
8 
4 
1 
2 s 4 
KXQPUYMJPWQTDBTOSIYSMIYK 
QMNKYFLUYYGVPVRDNCZEKJQO 
1 
2 
3 
4 
5 
6 
1 
2 
3 
4 
5 
6 
1 
2 
3 
4 
5 
6 
1 
2 
3 
' 
6 
6 


1 
2 
3 
4 
1 
2 
3 
4 
1 
2 
3 
' 
1 
2 
3 
4 


No 1 U R 0 G M W C T M Z Z V M V A J 
No 2 R W J X R V G D K D S X C E E C 
1 
2 a 4 a e 1 
2 a ' 
5 o 1 
2 a ' 
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d A reconstruction skeleton of "secondary alphabets" is now made by dlStnbutmg the 
letters m respective Imes correspondmg to the 12 different supenmposed pairs of numbers For 
example, all pairs correspondmg to the superunposit1on of position 1 of Message 1 with position 1 
of Message 2 are distnbuted m Imes 0 and 1 of the skeleton Thus, the very first superunposed 


pair 18 \ ;. the letter Z is mserted m lme 1 under the letter V The next U pair 18 the 13th super- 


impoSltion, with { ~, the letter D is mserted m lme 1 unde1 the letter F, and so on The skeleton 


is then as follows 


~ 
A B c D E F G H I 
J K L M N 0 p Q R s T u v w x y z 
- 
- - - - - - - - ,_ 
1-1 I 
J 
p 
D 
Q G c E 
K 0 
R z 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- - - - - - ,_ 
2-2 
H v N 
G 
u 
w 
E D M L x 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- - 
- 
- 
- 
- 
- 
- - 
- 
- - 
- 
,_ 
3-3 
E 
M 
x 
G 
I D J 
N 
R 
A 0 


- 
- 
- 
- --- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- - 
- 
- 
- 
- 
- 
4-4 
x 
0 c 
D K 
A F y Q 
v M 
- 
- - - - - - - -- - - 
- - 
- 
- 
- 
- 
- 
- 
- 
- 
- - - - 
1-5 
B 
T w 
L 
R 
E 
N 
y Q 
u A 
- 
- 
- 
- - - 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
2-6 M 0 
I 
c 
D 
u v 
F R 
- 
- 
- - 
- 
- 
- 
- 
- - - 
- 
- 
- 
- 
- 
- - - - - - - - - 
3-1 
0 
G 
R 
L 
p 
s 
D 
z 
- - 
- 
- 
- 
- 
- 
- - - - - - 
- 
- - - - 
- 
- 
- 
- 
- 
4-2 
L p 
H 
u v 
E D M 
F 
- 
- 
- - 
- 
- 
- 
- 
- - 
- 
- -- - 
- 
- 
- 
- 
- - 
- 
- 
- 
- 
1-3 
Q J 
v w K 0 x y 
M A 
- 
- 
- 
- - - 
- 
- - - - 
- 
- 
- -- - 
- - 
- 
- 
- 
- 
- 
2-4 B 
J 
x p 0 
A 
F y 
D 
- 
- 
- 
- - - - 
- 
- 
- 
- - - 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- ,_ 
3-5 N R 
y 
B c G 
Q s 
,_ 
4-6 
M 
L 0 
s u v w x 
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e There are more than sufficient data here to pernut of the reconstruction of a complete 
eqmvalent pnmary component, for example, the followmg 


1 
2 a 4 
6 
6 
1 s e ro n n IB u ~ ~ u ~ w ~ ~ ~ ~ ~ ~ ~ 
ITKNPZHMWBQEULFCSJAXRGDVOY 


f The subsequent steps m the actual decipherment of the text of either of the two messages 
are of conSlderable mteiest 
Thus far the cryptanalyst has only the cipher component of the 
pnmary shdmg components 
The plam component may be identical with the cipher com- 
ponent and may progress m the same direction, or m the reverse direction, or, the two com- 
ponents may be different 
If different, the plam component may be the normal sequence, 


direct or reversed 
Tests must be made to ascertam which of these vanous posSlbihties 18 true 
g (1) It will first be assumed that the pnmary plain component is the normal direct 


sequence 
Applymg the procedure outhned m Par 23 to the message with the shorter key 
(Message No 1, to give the most data per secondary alphabet), an attempt is made to solve 
the message 
It is unnecessary here to go further mto detail m this procedure, suffice it to 
md1cate that the attempt is unsuccessful and it follows that the plam component is not the 
normal direct sequence 
A normal reversed sequence is then assumed for the plain component 
and the proper procedure apphed 
Again the attempt is found useless 
Next, it is assumed 
that the plam component is identical with the cipher component, and the procedure outlmed JU 
Par 37 18 tned 
This also 18 unsuccessful 
Another attempt, assummg the plain component 
runs m the reverse direction, 18 hkeW18e unsuccessful 
There remams one last hypotheSls, viz, 


that the two pnmary components are different mixed sequences 
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(2) Here is Message No 1 transcnbed m penods of four letters 
Uruhteral frequency 


distnbut1ons for the four st>condary alphabets are shown below m Fig 52, labeled la, 2a, 3a, 
and 4a 
These distnbutions are based upon the normal sequence A to Z 
But smce the recon- 
structed cipher component is at hand these distnbutions can be reaITanged accordmg to the 
sequence of the cipher component, as shown m d1Stnbutions labeled lb, 2b, 3b, and 4b m Fig 52 
The latter distrilnthons may be combined by shifting distributions Sb, Sb, and 4b to proper super- 
impositions with respect to 1 b so as to yield a single monoalphabetic distribution for the entire message 
In other words, the polyalphabetic message can be converted into monoalphabetw terms, thm very 
consulerably simplifying the solution 


MESSAGE No 1 


VMYZ VABT 


GEAU AYYU 


NTPK 0 A YT 


FAYJ DKFE 


IZMB NWNT 


UMYK DBQK 


B VF I 
UL A J 


V VS E 
L Z I 0 


0 AF S 
UMAB 


KXKR 0 AF S 


YWCA KXQP 


CZ 0 R UYMJ 


DOZR PW QT 


DEF B DB T 0 


L K FE S I Y S 


SMKS MI Y K 


FAFE UR 0 G 


KVQU MW CT 


RCMY M Z Z V 
z v 0 x MVAJ 


--~~ ~- - 
~~~~~~ -~ 
~~ 
~­ 
la A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


~~~ 
~ 
~ 
~~§ - 
- 
- 
~~~~~ 
2a 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


~ 
~ 
~-~ 
~ 
- 
~ 
~-~~~ ~- 
~~ 
3a 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


- 
~~-- 
~ - 
~~~~~ 
~ 
--~~~- 
lb 
I T K N P Z H M W B Q E U L F C S J A X R G D V 0 Y 


2b 


3b 


- 
~-~ 
~ 
~~~ 
~ - 
~ 
~~- 
~-~ 
ITKNPZHMWBQEULFCSJAXRGDVOY 


~ 
~ 
~-~~-~ ~ 
~~ 
~~- 
~ 
~~ 
ITKNPZHMWBQEULFCSJAXRGDVOY 


~~~ -- 
~ 
~~ 
%~--~ 
~~' 
4b 
I T K N P Z H M W B Q E U L F C S J A X R G D V 0 Y 


F1Gl1BB52 
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(3) Note m Fig 53 how the four d1stnbutions are shifted for supenmpo81tlon and how the 


combined distnbution presents the cbaractenst1cs of a typical monoalphabetic distnbutlon 


lb 


2b 


3b 


46 


- 
~~-~ 
~ 
~ 
~~~~~ 
~ 
-~~~~~ 
ITKNPZHMWBQEULFCSJAXRGDVOY 
- 
~ 
~ - 
~~- 
~-~~-~ 
~ 
~~ 
EULFCSJAXRGDVOYITKNPZHMWBQ 


::::: 
::::::: 
~-~~ 
~ 
-~ 
~- 
~ 
~ 
~~ 
K N P Z H M W B Q E U L F C 5 J A X R G D V 0 Y I T 
-- 
~ 
~~ 
~~--~ 
~~~-~~ 
PZHMWBQEULFCSJAXRGDVOYITKN 


- 
~ 
~~ 
~§- 
~ 
~ 
~~~ 
lb -4b 
~ :::: ~ ~ :::: ~ 
~ ~ ::::: 
i? ~ ~ ~ 2 :::. -. ::::: ~ :::::: 2 ~ 2 - 
combmed 
I T K N P Z H M W B Q E U L F C S J A X R G D V 0 Y 


l!IGllBB li3 


(4) The letters belongmg to alphabets 2, 3, and 4 of Fig 52 may now be transcnbed m terms 


of alphabet 1 
That is, the two E's of alphabet 2 become I's, the L of alphabet 2 becomes a K, 
the C becomeq a P, and so on 
Likewise, the two K's of alphabet 3 become I'c;, the N becomes 


a T, and so on 
The entire message is then a monoalpho.bet and ean readily be solved 
It 111- as 


follows 


VD VT G 
I S W N S 
K 0 F M V 
L I R Z Z 
U D V 0 B 
UUDVU 


ENEMY 
HAS CA 
PT URE 
DH ILL 
0 NET W 
0 0 N E 0 


FM 0 MU 
U K W I S 
Y V L F C 
RDS D L 
N S D I U 
Z L JU M 
UR TR 0 
0 PS HA 
VE DUG 
IN AND 
CAN H 0 
L D F 0 R 


SD I U F 
MUMKU 
WW RP Z 
G Z U DC 
VMMVA 
F V W 0 M 


ANH 0 U 
R 0 R P 0 
S S I B L 
Y L 0 NG 
ERREQ 
U EST R 


V VD JU 
MN VT V 
D 0 W 0 U 
KS LL R 
0 RUD S 
Z 0 MU U 


E I N F 0 
RC EM E 
N T S T 0 
P A D D I 
TI 0 NA 
LT R 0 0 


KW WI U 
F Z LP V 
WV D 0 Y 
R S C V U 
M C V 0 U 
BDJMV 
P S S H 0 
UL DBE 
SENT V 
I A G E 0 
R GET 0 
WNFRE 


LVMRN 
XMUSL 


DER IC 
KR 0 AD 


(5) Havmg the plam text, the denvation of the cipher component (an eqwvalent) is an 


easy matter It is merely necessary to base the recono;truction upon any of the secondary alpha- 
betq, smce the plam te'1!:t-cipher relationship is now known directly, and the pnmary cipher 
component 1c; at hand 
The pnmary plam component is found to be as follows 


HMPCBL 
RSW 
ODUGAFQKIYNETV 


(6) The keywords for both messages can now be found, 1f desirable, by findmg the equivalent 


of AP m each of the secondary alphabets of the ongmal polyalphabet1c messages 
The keyword 
for No l 18 STAR, that for No 2 1q OCEANS 
152018-38--7 
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(7) The student may, if he wishes, try to find out whether the prunary components recon- 
structed above are the ongmal components or are eqwvalent components, by exammmg all the 
possible decnnations of the two components for evidences of denvat1on from keywords 


h As already stated m Par 26l, there are certain stat1Stical and mathematical tests that 
can be employed m the process of "matchmg" d1Stnbutions to ascertain proper super1mpos1t1ons 
for monoalphabetic1ty 
In the case Just consldered there were sufficient data m the d1Stribut1ons 
to perIIllt the process to be apphed successfully by eye, without necessitating statlStical tests 


i Th18 case is an excellent illustration of the apphcation of the process of converting a 


polyalphabetic cipher into monoalphabetic terms 
Because it is a very valuable and important 
cryptanalytic "tnck,11 the student should study it most carefully m order to gam a good under- 
standmg of the pnnciple upon which it is based and its significance m cryptanalysis 
The 
conversion m the case under discussion was possible because the sequence of letters forIIllng the 
mpher component had been reconstructed and was known, and therefore the umhteral d1S- 
tnbut1ons for the respective secondary cipher alphabets could theoretically be shifted to correct 
supernnpoSltions for monoalphabeticity It also happened that there were sufficient data m 
the d1Stnbut1ons to give proper mdications for their relative displacements 
Therefore, the 
theoretical possibility m th18 case became an actuahty 
Without these two necessary conditions 


the super1mpoS1tion and conversion cannot be accomplished 
The student should always be 
on the lookout for situations m which tins 18 possible 


48 Concludmg remarks -a The observant student wtll have noted that a large part ol 


th18 text 18 devoted to the elumdation and apphcation of a very few b&Slc pnnciples 
These 
pnnciples are, however, extremely important and thell' proper usage m the hands of a skilled 
cryptanalyst makes them practically md1spensable tools of his art 
The student should thereforp 


dnll lumself m the apphcation of these tools by havmg someone make up problem after problem 
for him to practice upon, until he acqull'es fac1hty m their use and feels competent to apply 
them m practice whenever the least oppo1turuty presents itself 
This will save him much time 


and effort m the solution of bona fide messages 
b Contmmng the analytical key mtroduced m Military Cryptanalysis Part I, the outline 


for the studies covered by Part II follows herewith 


Analytical Key for M1btary Cryptanalys1S, Part II * 


(Numbers an parentheses reler to Paragraph Numbers In this text) 


40~Poly llphabet1c 


Systemq (I, 2) 


'--------'--------11 li06-Aperlodlc (to be I 
taken up later) 


...._--~----' 


liOli-Penod1c (2) 


1111-Flulbla 
Per10- 
612-Fbecl 
Periodic- 
dlclty (2b) (to be taken 
1ty (2b) 
up later) 


l'OD-Progress1ve (to be 


taken op later) 


710-Bepeatmg 
Key 
Systems (3) 


811-,Wlth IDterrelat 
ed Cipher Alphabets 
(6-12) 


Dm-Normal 
Cipher 


Alphabets (Primary 
Comp0nenta are both 
Normal) (13-14) 


8l~W1th Jndepend 
ent Cipher Alphabets 
(Sc) 


904-Mized Cipher 


Alphabets (Primary 
Comp0nenta are not 
both Normal) (16, 17) 


1001-Dll'8ot 
'ltand 
ard Cipher AJ_pllabets 
(ldll-11 1411-/, 16) 


lOO~Reversed Stand 
ard Cipher Alphabets 
(131 
1~ 15) 


1003-Both 
~ompo- 
1004-0ne compoll8Dt 
nents nuxed (l?-JO) 
normal (16, 17) 


1101-Dlllerent Com 
poneots (30) 
ll02-ldent1cBI Com 


p00ents (28-30) 


1201-Sequencea pro- 
1202--Sequences pro- 
ceed 10 same direction 
ceed lo opposite dlrec 
(31-37 'll-46) 
t1ons (38, 40-46) 


11113-Plam 
C,ompo- 
lllK--Plaln 
Compo- 
nent Normal (18-211) 
DeDt Mixed (28) 


•For m:plan11t1on of the use of tins chart see Par liO of Military CryptanalyslS Part I 
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Components 


APPENDIX 1 


THE 12 TYPES OF CIPHER SQUARES 


(See Paragraph 7) 


TABLE 1-B 1 


(1) A B C D E F G H I J K L M N 0 P Q R S T U V W X y z 
(2) F B P Y R C Q Z I G S E H T D J U M K V A L W N O X 
Enc1phenng equations Ok12=0111 , 9p11=9c12 {9111 1s A) 


PLAIN TEXT 
A B C D E F G H I J K L M N 0 P Q R S T U V W X y z 


A~~~~~XFBPYRCQZIGSEHTDJUMKV 
B~~l~~QZIG~~HTDJUMKVALWNOXF 
C£~~~~SEHTDJUMKVALWNOXFBPYR 
D~~~~~VALWNOXFBPYRCQZIGSEHT 
E~~~~~~~~~~~~~~~~BPYRCQZIGS 
F~~~l~CQZIGSEHTDJUMKVALWNOX 
G~~~~~DJUMK~ALWNOXFBPYRCQZI 
H~~~~~~~~~~~~~~~~PYRCQZIGSE 
I~~~~~~~~~~~~~~~~OXFBPYRCQZ 
J~~~~~A~~~~~~~~l~CQZIGSEHTD 
K K V A L W N 0 X F B P Y R C Q Z I G S E H T D J U M 
_______ ,___ ______ 
__.,;;.._ 
L~~~~~~~~~~~~~~~~EHTDJUMKVA 
~M~~~A~WNOXFBPYRCQZIGSEHTDJU 
=N~~~F~PYR~~Z~GS~~TDJUMKVAL,~ 
O~~~~~~~~~~~~~~~~DJUMKVALWN 
P .f.l~ C Q Z I 
G S E H T D J U M K V A L W N 0 X F B 


Q~~~~~EHTDJUMKV~~WNOXFBPYRC 
R~~~~IGSEHTDJUMKVALWNOXFBPY 
S~~~~DJUMKVALWNOXFBPYRCQZIG 
T~~~~~~~A~~~~~~~PYRCQZIGSEH 
U~~~~A~~NOXFBPYRCQZIGSEHTDJ 
V~A~~~OXFBPYRCQZIGSEHTDJUMK 
W~NOXFBPYRCQZIGSEHTDJUMKVAL 
x~FBPYRcQzrasEHTDJUMKVALwN'o 
Y~~~~~~~~EHTDJUMKVALWNOXFBP 
z z I 
G s E H T D J u M K v ALW N 0 x F B p y R c Q 


1 Th1S table is labeled "Table 1-B" becaui.c 1t IS the same as Table 1-A on page 7, except that the houzontal 
Imes of the latter have been shifted so as io begm the succes'11ve alpha.bets with the successive letter& of the normal 
sequence 
(96) 


I I 


I L 
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'f ABLE II 


Component-; 


A 
B 
c 
D 
E 
F 
G 
H 
I 
J 


K 
L 


~M 
r"'l 
~N 
0 
p 


Q 
R 
s 


T 
u 
v 
w 
x 
y 
z 


(1) 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


(2) 
F B P Y R C Q Z I G S E H T D J U M K V A L W N 0 X 


PLAIN 'l.EXT 


A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


A H L u R G p s 0 v y B x D E I M K Q T w z c F J N 
- 
- - - - - ~ 
T A E N K z I L H 0 R u Q w x B F D J M p s v y c 
- 
- 
- - - - - 
- - - 
- - - - - - - - - - 
p w A J G v E H D K N Q M s T x B z F I L 0 R u y ,£ 
-G N R A x M v y u B E H D J K 0 s ~ w z c F I L p T 
- 
- 
- - - - 
- - - - - - 
I 
J Q u D A p y B x E H K G M N R v T z c F I L 0 s 
-u B F 0 L A J M I 
p s v R x y c G E K N ~ T w z D j!_ 
-L s w F c R A D z G J M I 0 p T x v B E H K N Q u y 
_, 
- 
- - - 
- y 


I p T c z 0 x A w D G J F L M Q u s y B E H K N R ,_ 


M T x G D s B E A H K N J p Q u y w c F I L 0 R v z 
,__ - 
- - - - - - - - - - - - - - - - - - - - - - - - 
F M Q z w L u x T A D G c I 
J N R p v y B E H K 0 s 
- 
- 
- - - - - 
- 
- - - - - - - - - ,_ 
c J N w T I 
R u Q x A D z F G K 0 14 s v y B E H L p 
- 
- 
- 
- 
- - - - - - - - - - - - ,_ 
z G K T Q F 0 R N u x A "' 


c D H L J p s v y B E I M 


- - - 
- - - - - - - - 
- - - - - - - - - - - 
D K 0 x u J s v R y B E A G H L p N T w z c F I 
14 _!l, 
-x E I R 0 D M p L s v y u A B F J H N Q T w z c G K 
----- - - - - - - - - - - - - - 
- 
- - - - - - - - - ,_ 
w D H Q N c L 0 K R u x T z A E I 
G M p s v y B F J 
- - - - - - -- - - - - 
- 
- - - - - - - - --- - - - - 
s z D M J y H K G N Q T p v w A E c I L 0 R u x B F 
- 
- - - 
- 
- 
- - - - - - - 
,__ --a 
0 v z I F u D G c J M p L R s w A y E H K N Q T x 
- - - 
- - 
- 
- - 
- - 
- 
- 
- - - 
- 
- 
- - - - - - - - - 
Q x B K H w F I E L 0 R N T u y c A G J M p s v z D 
- 
- 
- - - - - 
- - - 
- 
- --- - 
- 
- - - - - - - - - ,_ 


K R v E B Q z c y F I L H N 0 s w u A D G J M p T x 
- - - 
- 
- - 
- - - - - - 
-- 


H 0 s B y N w z v c F I E K L p T R x A D G J M Q u 
,__ - 
- 
- - - - - - - 
- - - - - - 
- - - - - - - - - - 
E L p y v K T w s z c F B H I M Q 0 u x A D G J N II 
-B I M v s H Q T p w z c y E F J N L R u x A D G K 
-y F J s p E N Q M T w z v B c G K I 0 R u x A D H L 
- 
- 
- - - - - - - - - - - - - - - - - - - - - - - - 
v c G p M B K N J Q T w s y z D H F L 0 R u x A E I 
- - - - - - - - - - - - - - - - - - - - - - - - - - 
R y c L I x G J F M p s 0 u v z D B H K N Q T w A E 
- - - - - - - Flsf!"L - - ------ - - - - - - - - 
N u y H E T c 
0 K Q R V Z x D G J M p s w A 
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TABJ,E III 


Componentc; 


(1) A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
(2) F B P Y R C Q Z I G S E H T D J U M K V A L W N 0 X 
Enc1phenng equations 
911:11=9112 , 9p11 =9~12 (9112 is F) 


A 
B 
c 


D 
E 
F 
G 
H 
I 
J 
K 
L 


:>< M 
~N 
0 
p 


Q 
R 
s 


T 
u 
v 
w 
x 
y 
z 


PLAIN TEXT 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
F B p y R c Q z I G ~I_!_ IH T 'D J u M K v A L w N 0 x 
x F B p y R c Q z I G s E H T D J u M K v A L w N 0 
- 
- 
- 
- 
- 
- - 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- - - 
- 
- 
0 x F B p y R c Q z I G s E H T D J u M K v A L w N 
- ----'--- 
- 
- 
- 
- 
N 0 x F B p y R c Q z I G s E H T D J u M K v A L w 
--- - 
- - - 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- - - 
- 
- 
- 
- 
- 
w N 0 x F B p y R c Q z I G s E H T D J u M K v A L 
- - 
- - 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- - - - - 
- 
L w N 0 x F B p y R c Q z I G s E H T D J u M K v A 
- - 
- 
- 
- 
- - 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- - 
- 
- 
- 
- 
- 
A L w N 0 x F B p y R c Q z I G s E H T D J u M K v 
- - 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- --- - 
- 
- 
- - 
- 
- 
- 
- - - 
v A L w N 0 x F B p y R c Q z I G s E H T D J u M K 
- ----- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
K v A L w N 0 x F B p y R c Q z I G s E H T D J u M 
- - - - 
- 
- - - - 
- 
- - 
-- - 
- 
M K v A L w N 0 x F B p y R c Q z I G s E H T D J u 
,__ - 
- 
- 
- - 
- - 
- 
- 
- 
- 
- 
- 
- 
u M K v A L w N 0 x F B p y R c Q z I G s E H T D J 
'--- - - - - 
- 
- 
J u M K v A L w N 0 x F B p y R c Q z I G s E H T D 
- - 
- 
~ 
- 
- 
- 
- 
- 
- - 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
D J u M K v A L w N 0 x F B p y R c Q z I G s E H T 
'--- - - 
- 
- 
- 
- 
- 
T D J u M K v A L w N 0 x F B p y R c Q z I G s E H 
-H T D J u M K v A L w N 0 x F B p y R c Q z I G s E 
- 
- - - 
- 
- 
- 
- 
- 
- - 
~ 
- 
- 
- 
- - 
E H T D J u M K v A L w N 0 x F B p y R c Q z I G s 
- - - 
- 
- - 
- 
- 
- 
- 
- 
s E H T D J u M K v A L w N 0 x F B p y R c Q z I G 
G s E H T D J u M K v A L w N 0 x F B p y R c Q z I 
- 
- 
I G s E H T D J u M K v A L w N 0 x F B p y R c Q z 
z I G s E H T D J u M K v A L w N 0 x F B p y R c Q 
'-- - 
- 
- 
- - 
- 
- 


~ z I G s E H T D J u M K v A L w N 0 x F B p y R c 
c Q z I G s E H T D J u M K v A L w N 0 x F B p y R 
'-- 
- 
R c Q z I G s E H T D J u M K v A L w N 0 x F B p y 
'-- 
~ 


y R c _g_ z I G s E H T D J u M K v A L w N 0 x F B p 
-p y R c Q z I G s E H T D J u M K v A L w N 0 x F B 
- ----- 
- -----TDJUMKVIAIL - 
- 
- - 
B P Y R C Q z I G S E H 
w N 0 x F 
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TABLE IV 


Componentc; 


(1) A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
OOFBPYRCQZIGSEHTDJUMKVALWNOX 


Enmphenng equations 
011:11 =91121 0p12=8c11 (0112 lb F) 


PLAIN TEXT 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


A U B F O L A J M I 
P S V R X Y C G E K N Q _!_ W ~E_,_!!_ 
BVCGPMBKNJQTWSYZDHFLORUXAEI 
CWDHQNCLOKRUXTZAEIGMPSVYBF~ 
DXEIRODMPLSVYUABFJHNQTWZCG,~ 
EYFJSPENQMTWZVBCGKIORUXADHL 
FZGKTQFORNUXAWCDHLJPSVYBEIM 
GAHLURGPSOVY~XDEIMKQTWZCFJN 
HBIMVSHQTPWZCYEFJNLRUXADGK~ 
ICJNWTIRUQXADZFGKOMSVYBEHL~ 
JDKOXUJSVRYBEAGHLPNTWZCFIM,~ 
KELPYVKTWSZCFBHIMQOUXADGJN~ 
FMQZWLUXTADGCIJNRPVYBEHKOS 
~~GNRAXMVYUBEHDJKOSQWZCFIL~~ 
~NHOSBYNWZVCFIEKLPTRXADGJM~~ 
OIPTCZOXAWDGJFLMQUSYBEHK~RV 
pJQUDAPYBXEHKGMNRVTZCFILOS~ 
QKRVEBQZCYFILHNOSWUADGJM~T~ 
RLSWFCRADZGJMIOPTXVBEHKNQUY 
SMTXGDSBEAHKNJPQUYWCFILORV,~ 
TNUYHETCFBILOKQRVZXDGJMPSWA 
UOVZIFUDGCJMPLRSWAYEHKNQTX,~ 
VPWAJGVEHDKNQMSTXBZFILORUYC 
WQXBKHWFIELORNTUYCAGJMPSVZD 
XRYCLIXGJFMPSOUVZDBHKNQTWA~ 
YSZDMJYHKGNQTPVWAECILORUXBF 
ZTAENKZILHORUQWXBFDJMPSVYCG 
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TABLE v 
Components 
(1) A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


~) F B P Y R C Q Z I G S E H T D J U M K V A L W N 0 X 
Enc1phenng equations 0i.12= 0p11 , 0 111=00n (0111 is A) 


PLAIN TEXT 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


A 
B 
c 
D 
E 
F 
G 
H 
I 
J 
K 
L 


~M 
~N 


Q 
p 


Q 
R 
s 
T 
u 
v 
w 
x 
y 
z 


A v K M 
.._ ___ 


B F X 0 
---- 
C R Y P 
---- 
D T H E 
---- 
E S G I 
---- 
F X 0 N 
,_ ___ 
G I Z Q 
,_ ___ 


H E S G 
---- 
I Z Q C 
---- 
J D T H 
---- 
K M U J 
1------- 
L A V K 
,__ ___ 
M U J 0 
---- 
N W L A 
,__ ___ 
0 N W L 
.._ ___ 
P B F X 
---- 
Q C R Y 
.._,_ __ 
R Y P B 
---- 
5 G I Z 
'---- 
T H E 5 
---- 
U J D T 
---- 
V K M U 
---- 
W L A V 
---- 
X 0 N W 
1------ 
Y P B F 
---- 
Z Q C R 


u 
-N 
B 
s 
z 
w 
c 
I 
R 
E 
D 
M 


T 
v 
A 
0 
p 


F 
Q 
G 
H 
J 
K 
L 
x 
y 


J 
D T H E S G I Z Q 
- - 
------ 
w L A V K M U J D T 
------ 
F x 0 N W L A V K M 
------ 
G I z Q C R Y P B F 
------ 
Q c R Y P B F X 0 N 
------ 
L A v K M U J D T H 
------ 
R y p B F X 0 N W L 
------ 
z Q c R Y P B F X 0 
------ 
y p B F X 0 N W L A 
------ 
s G I Z Q C R Y P B 
------ 
T H E ~_£_!_~_g__£_ R 
u J D T H E S G I z 
------ 
H E s ~_!_~_g___q_~ y 


K M u J 0 T H E S G 
------ 
v K M U J D T H E s 
------ 
N w L A V K M U J D 
------ 
B F x 0 N W L A V K 
------- 
x 0 N W L A V K M u 
------ 
c R y P B F X 0 N w 
------ 
I z Q C R Y P B F x 
------ 
E s G I Z Q C R Y p 
------ 
D T H ~~_Q _!_~_fl c 
M u J D T H E S G I 
------ 
A v K M U J D T H E 
------ 
0 N w L A V K M U J 
------ 
p B F X 0 N W L A v 


c R y p B F x 0 N w L 
- 
H E s G I z Q c R y p 
- 
u J D T H E s G I z _g_ 
x 0 N w L A v K M u J 
w L A v K M u J D T H 
- 
E s G I z Q c R y p B 
- 
A v K M u J D T H E s 
- 
N w L A v K M u J D T 
,_ 
v K M u J D T H E s G 
- 
F x 0 N w L A v K M u 
- 
y p B F x 0 N w L A v 
- 
Q c R y p B F x 0 N w 
- 
p B F x 0 N w L A v K 
- 
I z Q c R y p B F x 0 - 
G I z Q c R y p B F x 
T H E s G I z _g_ c R y 


M u J D T H E s G I z 
;_ 


J D T H E s G I z Q c 
L A v K M u J D T H E 
- 
0 N w L A v K M u J D 
- 
B F x 0 N w L A v K M 
R y p B F x 0 N w L A 
z Q c R y p B F x 0 N 
,_ 
s G I z Q c R y p B F ,_ 
D T H E s G I z Q c R - 
K M u J D T H E s G I 


A 
B 
c 
D 
E 
F 
G 
H 
I 
J 
K 


>- L 


f:i:l M 
~N 


0 
p 


Q 
R 
s 
T 
u 
v 
w 
x 
y 
z 
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TABLE VI 


Components 
(1) A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


~) F B P Y R C Q Z I G S E H T D J U M K V A L W N 0 X 


Enc1phenng equations 9i.12=8c11 1 0111=0p12 (0111 is A) 


PLAIN TEXT 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


A T p G J u L I 
M F c z D x w s 0 Q K _!!_I~ B y v R N 


,___ 
H A w N Q B s p T M J G K E D z v x R 0 L I 
F c y u 


f--- - 
- 
- - - - - - - - 
- 
- - - - - - 
- 
L E A R u F w T x Q N K 0 I H D z B v s p M J G c y 
- - - 
- 
- 
- - 
- - - - - - - - 
u N J A D 0 F c G z w T x R Q M I K E B y v s p L H 
- - - - - - - - 
- 
- - - 
- 
- - - - - - - - 
- 
- - - - 
R K G x A L c z D w T Q u 0 N J F H B y v s p M I 
E 


- 
- - 
- - - - - - - - 
G z v M p A R 0 s L I F J D c y u w Q N K H E B x T 
- - - - - - - - - - - - 
- 
- - - - - - - - 
- 
- - 
- 
- 
p I E v y J A x B u R 0 s M L H D F z w T Q N K G c 
- - - - - - 
- - - - - - 
- 
- - - - - - - - - - - - - 
5 L H y B M D A E x u R v p 0 K G I c z w T Q N J F 
- - - - - - - - - - - - - - - - - - - - - - 
- 
- - - 


0 H D u x I z w A T Q N R L K G c E y v s p M J F B 
- - - - - - - - - - - - 
- 
- - 
- - - - - - 
- 
- - - 
- 
v 0 K B E p G D H A x u y s R N J L F c z w T Q M I 
_, - - - - - - - - - - - - - - - - - - - - - - - - - 
y R N E H s J G K D A x B v u Q M 0 I F c z w T p L 
- - - 
- - - - - - 
- 
- - - - 
- 
- 
- - - - - - - - - - 
B u Q H K v M J N G D A E y x T p R L I 
F c z w s 0 


>--- 
- 
- 
- 
- 
- 
- - - - - - - 
- 
- -- 
x Q M D G R I 
F J c z w A u T p L N H E B y v s 0 K 


'----- - - - - 
- 
- - - - - - - - - - - - - - - - - 
- 
- 
D w s J M x 0 L p I 
F c G A z v R T N K H E B y u Q 
- - - - - - 
- 
- - - - - - - - 
- 
- - 
- 
- - - 
- - 
- 
,_ 


E x T K N y p M Q J G D H B A w s u 0 L I 
F c z v R 


1--- - - - - 
- 
- - - 
- 
- - - - - - - 
- - - - - - 
- 
- 
I 
B x 0 R c T Q u N K H L F E A w y s p M J G D z v 
- - - - - - 
- - - 
- 
- - - - 
- 
- - - - - - 
- - - 
- 
- 


M F B s v G x u y R 0 L p J 
I 
E A c w T Q N K H D z 
- - - - - - 
- - - 
- 
- - - 
- - 
- - - - - - 
- 
- 
- 
- - 
K D z Q T E v s w p M J N H G c y A u R 0 L I 
F B x 


,___ - - 
- 
- - 
- 
- - - 
- 
- - - - - - - 
- 
- - - - - - - 
Q J F w z K B y c v s p T N M I 
E G A x u R 0 L H D 
- - - - - -- - 
- - 
- - - - - - - - - 
- - 
- - 


T M I z c N E B F y v s w Q p L H J D A x u R 0 K G 
1--- - - - - - - - --- - - --- - - 
- - - - - - - - - 
w p L c F Q H E I 
B y v z T s a K M G D A x u R N J 


.___ - - 
- 
- - 
- 
- 
- 
- 
- - -- - - 
- - - 
- 
- - - 
- - 
- 
- 
z s 0 F I T K H L E B y c w v R N p J G D A x u Q M 
- - - - - - - - - 
- 
- - 
- 
- - 
- 
- - - - - - - 
- 
- 
- 
c v R I L w N K 0 H E w F u T u Q s M J G D v x T p 
- - - - --- 
- - - - - --- - --- 
- - 
- 
- - - - - 
- 
- 
F y u L 0 z Q N R K H A I c B x T v p M J G D A w s 
>- - - - - - - - - 
- 
- - 
- 
- 
- - - - - - - 
- - - - - 
J c y p s D u R v 0 L I M G F B x z T Q N K H E A w 
- - - - 
- - - - - - 
N G c T w H y v z s p M Q K J F B D x u R a L I 
E A 


A 
B 
c 


D 
E 
F 
G 
H 
I 
J 
K 


;:.... L 


~M 


N 
0 
p 


Q 
R 
s 
T 
u 
v 
w 
x 
y 
z 
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TABLE VII 
Components 
(1)- A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
(2)- F B P Y R C Q Z I G S E H T D J U M K V A L W N 0 X 


J~nophermg equations 0.,12=0Ptli 0112=0a11 (0112 lb F) 


PLAIN TEXT 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


G H I J K L M N 0 p Q R s T u v w x y z A B c D E F 
I-- 
- 
- 
- 
- 
- 
- 
- 
- - - 
- 
- 
- 
- 
- 
- 
- 
z A B c D E F G H I J K L 
~ 
M N 0 p Q R s T u v w x y 
s 
u 
v w x y z A B c D E F G H I J K L M N 0 p Q R 
T 
I-- - -- - 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- - - - 
M N 0 p Q R 
~ 
s T u v w x y z A B c D E F G H I J K L 
p Q R s T u v w x y z A B 
1-- 
c D E F G H I J K L M N 0 


A B c D E F G H I J K L M N 0 p Q R s T u v w x y z 
- 
- 
- - 
- 
- 
- 
- 
- 
- 
- 
- 
- - 
- 
- 
- 
- 
- 
- - 
- 
- 
- 
- - 
R s T u v w x y z A B c D E F G H I J K L M N 0 p Q 
1-- - 
- 
- 
- - 
- 
- 
- 
- 
- 
- 
- 
- 
- - - 
- 
- 
- 
- 
- 
- 
- 
- 
- 
0 p Q R s T u v w x y z A B c D E F G H I J K L M N 
1-- 


K L M N 0 p Q R 
s T u v w x y z A B c D E F G H I J 
1-- - 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- - - 
- 
L M N 0 p Q R s T u v w x y z A B c D E F G H I J K 
1-- 
I J K L M N 
1-- 
0 p Q R s T u v w x y z A B c D E F G H 
F G H I J K L M N 0 p Q R 
'-- 
s T u v w x y z A B c D E 
J K L M N 0 p Q R s T u v w x y z A B c D E F G H I 
- 
- 
D E F G H I J K L M N 0 p Q R s T u v w x y z A B c 
,__ 
,_ 
c D E F G H I J K L M N 0 p Q R s T u v w x y z A B 
,__ - - - - 
- 
- 
- - - 
- 
- 
- 
- 
- 
- 
- 
- - - 
- 
- - 
- - 
- 
y z A B c D E F G H I J K L M N 0 p Q R s T u v w x 
,__ -- - 
- - - - 
- 
- - 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- - - 
- 
- 
u v w x y z A B c D E F G H I J K L M N 0 p Q R s T 
1-- - - - - - 
- 
- 
- 
- 
- 
- 
- 
- 
- - 
- 
- - 
- 
- 
- 
- 
- 
- 
- 
w x y z A B c D E F G H I J K L M N 0 p Q R s T u v 
~ 
- 
- 
- - --- - 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- - - - - 
- 
- 
- 
- 


~q_ R s T u v w x y z A B c D E F G H I J K L M N 0 p 


N 0 p Q R s T u v w x y z A B c D E F G H I J K L M 
K L M N 0 p Q R s T u v w x y z A B c D E F G H I J 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- --- 
- 
- - - 
H I J K L M N 0 p Q R s T u v w x y z A B c D E F G 
I-- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
E F G H I J K L M N 0 p Q R s T u v w x y z A B c D 
~ 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- - 
- 
- 
- 
- 
- 
- - - 
- 
- - 
- 
- 
B c D E F G H I J K L M N 0 p Q R s T u v w x y z A 
,_ 


x y z A B c D E F G H I J K L M N 0 p Q R s T u v w 


~- - 
- --- 
- 
- - 
- 
- 
- 
- --- 
- 
- - - - - 
- ----- 
T u v w x y z A B c D E F G H I J K L M N 0 P Q R S 


A 
B 
c 


D 
E 
F 
G 
H 
I 
J 
K 


;:.... L 
r.:l 
~M 


N 
0 
p 


Q 
R 
s 
T 
u 
v 
w 
x 
y 
z 
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TABLE VIII 


Componets 


(1) A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


~) F B P Y R C Q Z I G S E H T D J U M K V A L W N 0 X 


Enc1phenng cquat1onc;; 
Ok12-=-00n 1 0112=0p/t (0112 1<i F) 


PLAIN TEXT 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
u v w x y z A B c D E F G H I J K L M N 0 p Q R s T 
,__ 
--- 
- 
- 
- 
- --- 
- 
- 
- 
- 
- 
- - 
- - 
- 
- 
- 
B c D E F G H I J K L M N 0 p Q R s T u v w x y z A 
,__ 
--- 
F G H I J K L M N 0 p Q R s T u v w x y z A B c D E 
,_ 
--- 


0 p Q R S T u v w x y Z A B c D E F G H I J K L M N 
,__ 
--- 
A B c D E F G H I J K 
L M N 0 p Q R s T u v w x y z 
,_ 
,__ 
--- 
A B c D E F G H I J K L M N 0 p Q R s T u v w x y z 
,__ 
--- 
y z A B c D E F G H I 
J 
K L M N 0 p Q R s T u v w x 
,__ 
--- 
M N 0 p Q R s T u v w x y z A B c D E F G H I J K L 
,__ 
--- 
I J 
K L M N 0 p Q R s T U v w x y z A B c D E F G H 
--- 
p Q R S T U v w x y z A B c D E F G H I J K L M N 0 
,__ 
--- 
s T u v w x y z A B c D E F G H I J K L M N 0 p Q R 
,__ 
--- 
v w x Y Z A B c D E F G H I J K L M N 0 p Q R s T u 
,__ 
--- 
R s T u v w x y z A B C D E F G H I J K L M N 0 p Q 
,__ 
--- 
x y z A B C D E F G H I J K L M N 0 p Q R s T u v w 
,__ 
--- 
y z A B C D E F G H I J K L M N 0 p Q R s T u v w x 
---- 
c D E F G H I J K L M N 0 p Q R s T u v w x y z A B 
---- 
G H I J K L M N 0 p Q R S T u v w x y z A B c D E F 
,__ 
--- 
E F G H I J K L M N 0 p Q R s T u v w x y z A B c D 
,__ 
--- 
K L M N 0 P Q R s T u v w x y z A B c D E F G H I J 
--- 
N 0 p Q R S T u v w x y z A B c D E F G H I J K L M 
---- -- 
F G H I J K L M N 0 p 
Q R s T U V w x y z A B C D E 
,_ 
--- 
T u v w x y z A B c D E F G H I J K L M N 0 p Q R s 
--- 
- 
L M N 0 p Q R s T u v 
w x y Z A B c D E F G H I J K 
,_ 
,__ 
---- 
N 0 p Q R s T u v w x y 
z A B C D E F G H I J K L M 
,_ 
,__ 
--- 
Q R s T u v w x y z A B c 
D E F G H I J K L M N 0 p 
,_ 
---- 
sTT" 
v ,w x y z A B c D E F G 
H I J K L M 1N 0 p Q R 
u 


A 
B 
c 
D 
E 
F 
G 
H 
I 
J 
K 


~L 
l'"l 
~M 


N 
0 
p 


Q 


R 
s 
T 
u 
v 
w 
x 
y 
z 
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TABLE IX 2 


Components 
(1) A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


~) F B P Y R C Q Z I G S E H T D J U M K V A L W N 0 X 
Enc1phcnng equations 0k11=0p12 , 0 111=0012 (0111 is A) 


PLAIN TEXT 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


A B C D E F G H I J ~_!:_!!I_!!_ 0 p Q R s T u v _!_I~ y z 
------- 
,_ 
V F R T S X I E Z D M A U W N B C y G H J K L 0 p Q 
------ 
---- 
K X Y H G 0 z s Q T U V J L w F R p I E D M A N B c 
,__ _____ 
------ 
M 0 P E I N Q G C H J K D A L x y B z s T u v w F R 
------ 
---- 
U N B S Z W 
,__ _____ c I R E D M T V A 0 p F Q G H J K L x y 
---- 
J W F G Q L R z y s T U H K v N B x c I E D M A 0 p 
------ 
---- 
D L X I C A y Q p G H J E M K W F 0 R z s T u v N B 
------ 
---- 
T A 0 Z R V p c B I E D S U M L X N y Q G H J K w F 
------ 
---- 
H V N Q Y K B R F Z S T G J u A 0 w p c I E D M L x 
------ 
---- 
E K W C P M F y x Q G H I D J V N L B R z s T U A 0 
r------ 
---- 
,_ 
S M L R B U x p 0 c I E Z T D K W A F y Q G H J v N 
------ 
---- 
G U A Y F J 0 B N R ~ 
_§_ _g_ _!!_ T M L v x p c I E D K w 
------ 
I J V P X D N F w y Q G C E H U A K 0 B R z S T M L 
------ 
---- 
Z D K B 0 T w x L p C I R S E J v M N F y Q G H u A 
------- 
---- 
Q T M F N H L 0 A B R Z Y G s D K u w x p c I E J v 
------ 
---- 
,_ 


C H U X W E 
r------ A N V F y Q p I G T M J L 0 B R z s D K 
---- 
R E J 0 L S v w K X P C B Z I H U D A N F y Q G T M 
r------ 
---- 
- 
Y S D N A G 
------ K L M 0 ~~~_g_ z E J T v w x p C I H u 
P G T W V I M A U N F Y X C Q S D H K L 0 B R Z E J 
r------- 
---- 
B I H L K Z u v J w X P 0 R c G T E M A N F _!__9_ s D 
------ 
---- 


!__ ~ 
~- _!_ _!_ _g_ J K D L 0 B N Y R I H s u v w x p c G T 
---- 
x Q s v u c D M T A N F W P y Z E G J K L 0 B R I H 
------- 
--- 
- 
-- 
0 C G K J R T u H V W X L B p Q s I D M A N F y z E 
------- 
---- 
N R I M D Y H J E K L 0 A F B C G z T u v w x p Q s 
WYZIUTP E D S M AIN v x F R I Q H J K L 0 B c G 
------- 
L P Q J H B s T Glu V W K 0 
-Yiz 
,_ 


x 
c E D M A N F R I 


1 An mtf're'!tmg fact about this ca~e 11> that 1f the plam component 1s made 1dent1cal with the cipher com- 


ponf'nt (both bemg the sequence FBPY 
), and 1f the enc1phermg equations are the same as for Table 1-B, 
then the resultant cipher squarf' is identical with Table IX, except that the key letterb at the left arc m the 
order of the re• ersed mixed component, FXON 
In other words, the secondary mp her alphabets produced 
by the interaction of two identical mixed components are the saJQe as those given by the mteract1on of a 
mixed component and the normal component, 
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TABLE X 3 


Components 
(1) A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
OOFBPYRCQZIGSEHTDJUMKVALWNOX 


PLAIN TEXT 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


A B c D E F G H I J K L M N 0 p Q R s T u v w x y z 
- - - - 
- 
- - 
- 
- - - 
- 
- 
- ,_ 
A 
B 
c 
D 
E 
F 
G 
H 
I 
J 
K 
L 


r- - 
- - - - - - - 
- 
- 
w K 0 x y z c E D M A N F R I 
L p Q J H B s T G u v 
- - - - 
- 
- 
- - 
- 
- - - ,_ 
,.._ 
- 
- - 
A N v x F R I Q H J K L 0 B c G 


>< M 
l";i;"l 
~N 
0 
p 


Q 
R 
s 
T 
u 
v 
w 
x 
y 
z 


w y z u T p E D s M 
- 
- - 
- 
- - 
- 
- 
N R I M D y H J E K L 0 A F B c G z T u v w x p Q s 
- - - 
- 
- - 
- 
- 
- - - - - - 
- 
- 
- - 
- 
- - 
- 
- 
- - - 


0 c G K J R T u H v w x L B p Q s I D M A N F y z E 
,__ - - - 
- 
- 
- - 
- 
- - - 
- 
- 
- - - - 
- - 
- 
- 
- 
- 
- 
- 
x Q s v u c D M T A N F w p y z E G J K L 0 B R I H 


I--- - - - - 
- - - 
- - - 
- 
- 
- 
- 
- 
- 
- - 
- 
- 
- 
- 
- 
- 
F z E A M Q J K D L 0 B N y R I H s u v w x p c G T 
- - - 
- 
- - - 
- 
- - - - - 
- 
- 
- - - - - - - - 
- - 
- 
B I H L K z u v J w x p 0 R c G T E M A N F y Q s D 
r- - - - - - - - - 
- - - 
- 
- - 
- - - - - - 
- 
- - - - 
p G T w v I M A u N F y x c Q s D H K L 0 B R z E J 
>--- - 
~ 
- 
- - 
- 
- - - 
- 
- 
- - - - 
- 
- - - 
- - - - 
- 
y s D N A G K L M 0 B R F Q z E J T v w x p c I H u 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
R E J 0 L s v w K x p c B z I H u D A N F y Q G T M 
,_ 
r-c H u x w E A N v F y Q p I G T M J L 0 B R z s D K 
- - - 
- 
- - 
- - - - 
- 
- - 
- 
- - 
- 
- 
- 
- 
- 
- 
- 
- - - 


~ T M F N H L 0 A B R z y G s D K u w x p c I E J v 
- 
- - - 
- - 
- 
- 
- - - '- - 
- 
- 
- - 
z D K B 0 T w x L p c I R s E J v M N F y Q G H u A 
- 
r- 
- - 
- 
- 
r- 


I J v p x D N F w y Q G c E H u A K 0 B R z s T M L 
- 
- 
- - - - - - - ,_ 
.__ 
G u A y F J 0 B N R z s Q H T M L v x p c I E D K w 
- 
- - - - - - - 
- 
,_ 
r- 
- 
s M L R B u x p 0 c I E z T D K w A F y Q G H J v N 
.__ - - '-- - - - 
- 
- - - - 
- 
- - - - - - - - - - - 
,_ 


E K w c p M F y x Q G H I D J v N L B R z s T u A 0 
r- - 
- 
- - - - - - 
- - - - 
- - - - - - - - 
- - - 
- 
- 
H v N Q y K B R F z s T G J u A 0 w p c I E D M L x 
- - - - 
- 
- 
- 
r- 
- 
T A 0 z R v p c B I E D s u M L x N y Q G H J K w F 
r- - - - - - - - - - - - - - - 
- 
- - 
- - - - - - - - 


D L x I c A y Q p G H J E M K w F 0 R z s T u v N B 
,__ - - - 
- 
- - 
- 
- - - - - - - - 
- - - - - 
- - - - 
- 
J w F G Q L R z y s T u H K v N B x c I E D M A 0 p 


>--u N B s z w c I R E D M T v A 0 p F Q G H J K L x y 
- 
- - 
- - - - ,_ 
- 
M 0 p E I N Q G c H J K D A L x y B z s T u v w F R 
.__ - - - 
- 
- 
- - - - - - - - - - - - - - - - - - ,_ 


K x y H G 0 z s Q T u v J L w F R p I E D M A N B c 
,__ 
- - 
"Aiu 
- - 
- - - - --- ,_ 


v F R T s x I E z D M 
w N B c y G H J K LIO p Q 


• Footnote 2 to Table IX, page 104, also apphes to this table, e"l[cept that the key letters at the left will 
follow the order of the direct m1"1[ed component 
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TABLE XI 
Components 


(1) A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


~) F B P Y R C Q Z I G S E H T D J U M K V A L W N 0 X 


PLAIN l'KX"T 
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TABLE XII 
Components 


(1) A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
(2) F B P Y R C Q Z I G S E H T D J U M K V A L W N 0 X 


PLAIN 1EXf 
A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 


F x _Q_!!_I_!_ L A v K M u J D T H E s G I Z Q c ~I_!_ p B 


'--- 
~ F X O N w L A V K M u J D T H E s G I z _g_ C R y p 
--- 
p B F x 0 N w L A v K M u J D T H E s G I z Q c R y 
- - - --- - 
- 
- - - 


A 
B 
c 
D 
E 
F 
G 
H 
I 
J 
K 
L 


- - - - - - - - - 
z Q c R 
y 
'--- 


;:.. M 
r:i:I 
~N 
0 
p 
Q 
R 
s 
T 
u 
v 
w 
x 
y 
z 


R 
-c 
- 
~ 
z 
'--- 
I -G 
'---s 
'-- 
E 
i--- 
H 
-T -D 
- 
J 
'---u 
M 
'-- 
K 
..__ v 
-A 
-L - 
)!__ 
N 
-0 -x 


p B 
y p 
R y 
c R 
Q c 
z Q 
I z 
G I 
s G 
E s 
H E 
T H 


D T 
J D 
u J 
r- 


M u 
-K M 
v K 
A v 
L A 
w L 
N w 
0 N 


- - 
F x 0 


B F x 
p B F 
y p B 
R y p 
c R y 


Q c R 
z Q c 
I z Q 
G I z 
s G I - 
E s G 
H E s 
T H E 
I- 


D T H 


~ 


J D T 
u J D 
-M u J 
I-- 


K M u 
v K M 
A v K 
L A v 
-w L A 


N w L A v K 


0 N w L A v 
x 0 N w L A 


F x 0 N w L 
B F x 0 N w 
p B F x 0 N 
y p B F x 0 
R y p B F x 
- 
- - - - 
c R y p B F 


_9_ c R y p B 
z Q c R y p 


I z Q c R y 


G I z Q c R 
s G I z Q c 


E s G I z Q 
- 
H E s 
.....__ G I z 
T H E s G I 


D T H E s G 
J D T H E s 
u J D T H E 
- 
M u J D T H 


K M u J D T 
v K M u J D 


M u J D T H E S G I 
T _!!_!~ s G I z Q c 
K M u J D 
v K M u J D T H E s G I z Q 


A v K M u J D T H E s G I z 


L A v K M u J D T H E s G I 
w L A v K M u J D T H E s G 


N w L A v K M U J D T H E s 
,_ 


0 N w L A v K M u J D T H E 
- - - - - - - - - - - - - 
- 
x 0 N w L A v K M u J D T H 


F x 0 N w L A v K M u J D T 


B F x 0 N w L A v K M u J D 
L A v K M u J 
p B F x 0 N w 
- 
y p B F x 0 N w L A v K M u 


R y p B F x 0 N w L A v K M 


v 
c R y p B F x 0 N w L A 
K 
- - 
I- - - - - - - - - - - - 


Q c R y p B F x 0 N w L A v 
- 
z Q c R y p B F x 0 N w L A 
,_ 


I z Q c R y p B F x 0 N w L 
y 
B F x 0 N w 
G I z Q c R 
p 


'-- 
,_ 


s G I z Q c R y p B F x 0 N 
- 
c 
y p B F x 0 
E s G I z Q 
R 
,_ 


H E s G I z Q c R y p B F x 
,_ 
T H E s G I z Q c R y p B F 


I 
I 
I 
I, 


I 
I 


I I 


1 I 


I I 


I I 


I I 


APPENDIX 2 1 


ELEMI< NTARY STATISTICAL THEORY APPLICABLE TO THE PHENOMENA OF REPETITION 


IN CRYPTANAL1SIS 


1 Introductory-a In Par qc it was stated that the phenomena of repetition m crvpt- 
anitlytics may be removPd from the realm of mtmt10n and dealt with <itatistically 
The dis- 
rni>sion of the matter will here be confined to relatnt:'ly o,nnple ph.iMs of the theory of prohabihty, 
a defimtion of which implies phtlo<ioplncul que'lt10ns of no practical mterest to the student of 
c 1yptanalysis For lu& purposPs, the following defimt10n of a priori probabihty will be suffiC'H"nt 


The probability that 11.n event Mll OC'cur is the ratio of the number of "fav- 


01 able cases" to the number of total possible ca'les, all C'ases bemg equally 
hkely to occur 
By a "favorable C'asc" l'l meant one winch will produC'e thP 


event m question 


b In what follo'\\s, 10ference "111 be made to random assortmenh of letters and espeC'ially to 
random text 
By the latter \\-ill be meant merely that the text under consuleratlon has been as- 
.:;umed to have been enciphered by "Ome more or le'>r:. complex cryptograpluc system so that for 
all pradical pmpose'l the sequenee of letters con'ltitutmg tlus tP:i..t is a random assortment, that 
l'l, the sequence is 3ust about "What \\ould have been obtamed if the letters had been drawn at 
random out of a box contaimng a largP number of the 26 letters of the alphabet, all m equal 
proportions, so that there aie exactly the same numbers of A's, B's, C's, 
Z's It is assumed 
that each time m :rrakmg a dru\\-mg f10m such a box, the latter is thoroughly shaken so that the 
lettor<i a1e thoroughly nm.ed and then a 'lmgle letter ir:. selected at random, recorded, and 
replaced m the 'lame box In" lmt follo\\-s, the \\Ord "ho}.." will refer to the box R'i descnbed 
c A umhteral frequeney d1stnbutlon of a large volume of random teJ..t will be "flat," 


l 
I" , Incl iPg crests and troughs 
d For purposes of stat1st1cal analys1c;, the text of a monoalphabet1c substitution <'lpher l'l 
Pqmvalent to plam te"\.t 
As a eorollary, "When a polyalphabet1c bubst1tution cipher has been 


ieduced to tho .,imple terms of a "et of monoalphabets, 1 e , when the letters constltutmg the 
<'ipher te:i..t have been allocated mto their p10per umhterc1,l distnbutlons, the letters falhng mto 
the respective distributions nre statistically eqmvalent to plmn te'l.t 
2 Data perta.uung to single letters-a (1) A smgle letter will he drawn at random f10m 


the boA 
What is the probab1htv that it \\-ill be an A? AC'cordmg to the foregorng defimt1on of 


probability, smce the total numhn of po'>&1ble rnses is 26 and the number of favorable cu'les is 


1 
here only 1, the probab1hty is 1 26=26 = 0385 
Tlns ic:; the prnbab1ht) of <lrawmg an A f1om 
the box The probab1hty that the letter drnwn will be a B, a C, a D, 
, a Z l'l the 'lame as fm A 
In othei wordc:;, the probability of drawmg any specified i.ingle letter l'> p= 0385 


(2) The value p= 0385, as found above, may also be termed the probability constant for 


•;angle letters m random te"\.t of a 26-lettcr alphabet 
For any language tb1q constant is mPrely 


the reciprocal of the total umnLor of d1flerent chnrn( tors which may be employed m wntmg the 
text m que&t10n 


1 In the preparation of this appendix, the author has Jud the benefit of the very helpful sugge'!t1ons of 


Capt H G Miller, Signal Corp-., Mr F B Ro\\lett, D1 S Knllha<'k, aml D1 A Sml..O\, Assistant Cryptanalysts, 
O C Sig 0 
Certam pa1t<1 of D1 
Kullhac.k's 1111p111tant p.i.pe1 "Htut1st11 al Methods 111 C1yptanaly~1b" form 
the h11.!.1s of the d1sc.uss10n 
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(3) Another \\ay of mterpretmg the notat10n p= 0385 is to say that ma large volume of 
random te:i.t, for e"'Cample m 100,000 letters, aPy letter that one may choose to specify may be 
expected to occur about 3,850 tunes, m 10,000 letters it may be expected to occur about 385 
times, m 11000 letters, about 38 5 times, and so on 
In every-day language it would be said 


that "m the long run" or "on the a\erage" m 1,000 letters of random text there will be about 
38 5 occurrences of eJ.ch of the 26 letters of the alphabet 
(4) But unfortunately, m eryptrnalysis it ic; not often the case that one has such a large 
number of letters available for study m any smgle C'ipher alphabet 
More often the cryptanalyst 
has a relatively small number of letters and these must be distributed over several cipher 
alphabets 
Renee it is neressnry to be able to dell! with smaller numbers of letters 
Consider 
a specific piece of random te:i..t of only 100 letters It has been seen that "m the long run" 
each letter may be e'!:pected to occur about 3 85 times m this amm•nt of random te-..t, that is, 
the 26 letters will h.tve an average frequen<'y of 3 85 
But rn ieaehmg this ayerage of 3 g;; 


occurrences m 100 letters, it is ob\ ioui; that i>ome letter or letters may not appPar at all, some 
may appear once, some twice, and so on 
How many will not appea.r at all, how many will 


appear 1, 2, 3, 
ti,mes? In other words, hov. will the 1.hfferent categones of letters (differ- 


ent m respect to frequency of occurrence) be du;tnbuted, or what wtll the distributwn be hke? 
Will it follow any kmd of law or pattern? The cryptanalyst also "ants to know the anr:.wer 
to questions suc,h as these "What If> the probability that a specified letter wtll not appea1 at 
all ma given piece of text? That it \\Ill appear eTactly 1, 2, 3, 
trmcs? That it will appear 
at least 1, 2, 3, 
trmcs? The c:;amP smt of questions muy he asked with respect to digraphs, 


tngraphs, and so on 
b (1) It may be stated at on<c that questions of tlus nature are not easily answered, and 
a complete d1scuss10n falls qmtf> outside the scope of this tf>xt 
However, it will be sufficient 


for the present purposes if the student is provided with a more or less snnple nnd pra<. tlC'al means 
of findmg the answers 
With this m view ccrtam cu1ves have been prepared fro~ data based 


upon Pois~on's exponentml eJ..pansion, or the "law of small probabilities' and thell' use v. tll 
now be explamed 
Students without a knowledge of the mathematic,al theory of probability 


and statistics will have to take the curves "on faith" Those mterested m their denvation are 
referred to the followmg texts 
Fisher, R A, Statistical Methods for Research Workers, London, 1937 
Fry, T C, Probabuitv and Its Engineering Uses, New York, 1928 
(2) By means of thPse probability curves, it is possible to find, m a relati" ely easy manner, 
the probab1hty for O, 1, 2, 
11 occurrentes of an event m n cases, 1f the mean (e"'Cpected, 


average, probable) number of occurrent es m these n <'ases is known 
For example, given a cryp· 


togram eqmvalent to 100 letters of iandom te ... t, wh'\t is the probability that any speC'1fied smgle 
letter, whatever will not nppenr at all m the cryptogram? Smee the probability of the oC'currence 


of a speclfi.ed single letter is io = 0385, and there are 100 letters m the cryptogram, the average 


or expected or mean number of occurrences of an A, a B, a C, 
, is 0385X 100=3 85 
Refer 
now to that probability curve \\<Inch is marked "]0", meanmg "frequency zero", or "zero occur- 
rences " On the hor11ontal 01 x aAis of that curve find the pomt correspondmg to the value 
3 85 and follow the vertical eoordmate deternuned by tlus value up to the pomt of intersection 
with the curve itself, then follo"\\< the hon,onti1l coordmate deteumned by tlu,, mtersect1on pomt 
over to the left and read the value on the vertical axis of the curve 
It is appro"'O.IIlately 021 
Tlus means that the probability that a specified smgle letter (an A, a B, a C, 
) will not appear 


at all m the cryptogram1 if it really were a pe1fectly random assortmPnt of 10() letters, la 021. 
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That is, e.ccordmg to the theory of probab1hty, m 1,000 cnses of random-text messages of 100 
letters each, one may expect to find about 21 messai;es m which a specdied cimgle Jettei Wiil not 
appear at all 
Another wny of saymg the same thm~ is If 1 000 seto of 100 letters of random 
text are <''Yammed, m aboi..t 21 out of the 1,000 such sets any letter that one may choose to 
name will be absent 
'lh1s, of course, is merely a theoreh<'al ei.pcctnncy, it md1cates only 
what probably '"'tll h!irpen m the long run 
(3) What is the probab1hty that a specified smi!le lette1 \Hll appear aactly once m I 00 


letters of random te:i.V 
To answer tlus question, find on the cun e marked fi. tLe pomt of 
mtersect1on of the 'erticc.l coordmate coirespondmg to the meen or &YerngE' vnlue 3 8 i with 
the curve, follow the hortzt'ntal coordmate thus <lctm wmed over to the vertical scale at the 
left, read the value on this scale 
It is 082, whILh mean~ that m 1,000 cases of random-text 


messages of 100 lette1s each, one may expect to find about 82 messages m which any letter 
one chooses to specify wtll o~cur e:i..actly once, no more and no less 


(4) In the same way, the probability that a spccmed smgle letter \\<tll appear er,actly twice 
is found to be 158, exactly 3 times, 202, and so on, as sho~n m the table below 


100 lettera of random text 


Proba.b1ht\ th'lt 
Frequency 
a. specllled SID~le 
(r) 
letter "'ill OCCUl 
eucth x tunes 


0 
0 021 


1 
082 


2 
158 
3 
202 


4 
195 
5 
150 


6 
096 


7 
053 


8 
026 


9 
011 
10 
004 


11 
001 


(5) To find the probability that a specified smgle letter v.tll occur at least 1, 2, 3, 
U.mes 
ma senes of letters conshtutmg random tci..t, one reasons aci follov.s Smee the concept "at lea.st 
l" unphes that the number specified ic; to be considered only as the mm1mum, v.1th no lmut 
md1cated as to m1U.1mum, occurrences of 2, 3, 4, 
are alcio "favorable" cases, the probabilitws 


for exactly l, 2, 3, 4, 
occurrences should therefore be added and this v.tll give tbe probability 


for "at least 1 " 
Thus, m the case of 100 letters, the sum of the probabilities for exactly 1 to 11 


occurrences, as set forth m the table directly above, IS 978, and the latter value approXlm.atss 
the probability for at least 1 occurrence 
(6) A more accurate result v.tll be obtruned by the follo'v\mg reasomng The probability 
for zero occurrences i~ 021 
Smee it 18 certum that a specified letter v.ill occur either zero times 


or 1, 2, 3, 
times, to find the probability for at lem,t one ume it ii. merely necessary to sub- 
tract the probability for zero occurrences from umty 
That is, 1- 021 = 979, which lS 001 
greater than the result obta.med by the other method 
The reason it is greater 1s that the value 
979 mcludes occurrences beyond 11, which were excluded from the previous calculation 
Of 


course, the probabilities for these occurrences beyond 11 are very small, but taken all together they 
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05 
10 
15 
20 


1 
25 


H: +i+ 
30 


Irr 


35 
40 
45 
50 
'Yl'1 
SS 


I 


60 
65 
70 
7.5 


Cunes sho\\Jng probab1ht) for 0, 1, 2, and 3 occurrences of an event m n cases, given the mean number of occurrenct.s 
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Curves showmg probability for 4, 5, 6, and 7 occurrences of an event m n cases, given the mean number of occurrences 


0 


Curves sho"\\mg probability for 8, 9, 10, and 11 occurrencPs of an event m n cases, given the mean number of occurrences 
152018-38 
(1'ace p 110) 
No 2 
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add up to 001, the difference between the results obtamed by the two methods 
The proba- 
l•ility for at least 2 occmrences is the difference between umty o.nd the sum of tlu• probo.b1hty 
for zero and e'\.actly 1 occurrences, that is, 1-(Po+Pi)=l-( 021+ 082)=1- 103-= 897 
The 


respective probab1htles for vanous numbers of occurrences of a specified smgle letter (from 0 to 
11) are given m the following table 


100 letters of random text 


Probability that a Probability that a 


Frequency 
specified sml!le 
specified •1ntle 


letter v. i11 ooour 
letter will occur 
(%) 
exactlyz 
at lea.t.r 
times 
tlDles 


0 
0 021 
1 000 


1 
082 
979 
2 
158 
897 
3 
202 
739 
\ 4 
195 
537 


a 
no 
34~ 


6 
096 
192 
7 
053 
096 
8 
026 
043 
9 
011 
017 


10 
004 
006 


11 
001 
002 


(7) The foregomg calculat10ns refer to random text composed of 100 letters 
For other 
numbers of letters, it is me1ely necessary to find the mean (multiply the probability for drawmg 
1 
a speetfied smgle letter out of the box, which is 26 or 0385, by the numbe1 of letters m the 


assortment) and refer to the vanous curves, as before 
For example, for a random assortment 
of 200 letters, the mean is 200 X 0385, or 7 7, n.nd this is the value of the point to be sought along 
the horizontal or x axes of the curves, the mtersections of the respective vertical Imes correspond- 
mg to thts mean with the various curves fvr 0, 1, 2, 3, 
occurrences give the probabtl1t1es for 
these occurrences, the reading bemg taken on the vertical or 'I/ axes of the curves 
(8) The discuss10n thus far has dealt with the probab1hties for 0, 1, 2, 3, 
occurrences 


of specified smgle letters It may be of more practical advantage to the student if he could be 
sho\\n how to find the ans\\er to these questions Gnen a random assortment of 100 letters 
how many letters may be eJ>.pected to occur eiactly 0, 1, 2, 3, 
times? How many may be 
expected to occur at least 1, 2, 3, 
times? The curves may here agam be used to answer 
these questions, by a very simple calculation multiply the probab1hty value as obtamed above 
for a specified smgle letter by the number of different elements bemg conSidered For example, 
the probability that 11 specified smgle letter "'111 occur exactly twice ma perfectly ro.ndom assort- 
ment of 100 letters is 158, smce the number of different letters 1s 26, the absolute number of Single 
letters that mny be expected to occur eJ>.ac.tly 2 times m this assortment is 158)(26=4 108 
That is, m 100 letters of randm text there should be about four letters which occur exal'tly 2 times 
The following table gives the data for van01. s numbers of occurrences 
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100 letters of random ~ 


P1obab11lty that a Probab1hty that a Probable number Probable number 


Frequency 
spe01fied single 
specrlied s1niile 


lette1 will occur 
letter will occur 
of le•ters appear 
of letters appear 
(:r) 
exactly :r 
at leasts 
mg OXl\ttly S 
mg at leasts 
times 
times 
times 
times 


0 
0 021 
1 000 
0 546 
26 000 


1 
082 
979 
2 132 
25 454 
2 
158 
897 
4. 108 
23 322 
3 
202 
739 
5 252 
19 214 
4 
195 
537 
5 070 
13 962 
5 
150 
342 
3 900 
8 892 
6 
096 
192 
2 496 
4 992 
7 
053 
096 
1 378 
2 496 
8 
026 
043 
b76 
1 118 
9 
011 
017 
286 
442 


10 
004 
006 
104 
156 
11 
001 
002 
026 
052 


(9) Referrmg agam to the curves, and spec:rli.callv to the tabulated results set forth dll'ectly 
above, it will be seen that the probability that there will be exactly two occurrences of a specrlied 
smgle letter m 100 letters of random text ( 158), is less than the probability that there will be 
exactly three occurrence9 ( 202), m other words, the chances that a specified Blilgle letter will 
occur exactly three trmes are better, by about 25 percent, than that it will occur only two times 
Furthermore, there will be about five letters wlu.ch will occur e:i..actly 3 times, and about five 
wlu.ch \\'ill occur exactly 4 times, whereas there will be only about two letters which will occur 
exactly 1 t1me 
Other facts of a similar import may be deduced from the foregomg table 
c The discussion thus far has dealt with random assortments of letters What a.bout other 
types of teicts, for example, normal plam text? What is the probabihty that E will occur O, 1, 
2, 3, 
trmes m .;o letters of normal Enghsh? The relative frequency value or probabihty 
that a letter selected at random from a large volume of normal Enghsh text will be E is 12604 
(In 100,000 letters E occurred 12,604 times ) For 50 letters tills value must be multiphed by 50, 
givmg 6 3 as the mean or pomt to be found along the x a'\.es of the curves The probabilities for 
O, 1, 2, 3, 
occuriences are tabulated below 


60 lettera of normal Engliah plain text 


Frequency 


Probab1llty that 
Probab1ht) th~t 
anEwlll be 
anEw1ll be 
(s) 
drawn exactly 
drawn at least 
:r tunes 
:r tunes 


0 
0 002 
1 000 


1 
011 
998 
2 
036 
987 
3 
076 
951 
4 
120 
875 
5 
151 
755 
6 
159 
604 


7 
143 
445 
8 
113 
302 
9 
079 
223 


10 
050 
173 
11 
029 
123 


• 
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d (1) It has been seen that the probability of occurrence of a spec:rli.ed Blilgle letter m random 


1 
text employmg a 26-letter alphabet 1S p=26= 0385 
If a conSlderable volume of such text 1S 


wntten on a large sheet of paper and a pencil is directed at random toward this text, the probabil- 
ity that the pencil pomt will mt the letter A, or any other letter which ma'lj be specified in advance, 


IB 0385 
Now suppose two pencils a.re directed srmllitaneously toward the sheet of paper 
The 


probability that both pencil pomts will ~t two A's is 2~x 2~=2~2= 00148, Slnce m tlus case 


one lS dealmg with the probability of the simllitaneous occurrence of two events wluch are 


mdependent 
The probability of rutting two B's, two C's, 
I two Z's lS likewise 2~ Hence, 


if no particular letter is spec:rli.ed, and merely tlus question is asked 
"What is the probability 


that both pencil pomts will lut the same letter?" the answer must be the sum of the separate 
probabilities for SlIDultaneously hittmg two A's, two B's, and so on, for the whole alphabet, 
1 
1 
wluch is 26 x262= 26 = 0385 This, then, is the probability that any two letters selected at random 


m random text of a 26-letter alphabet will be identical or will coincide 
Smee this value remams 
the same so long as the number of alphabetic elements remams fixed, it may be said that the 
probability of monographic coincidence in random text of a 26-element alphabet '/,8 0385 
The fore- 
gomg ital1c1zed expression 2 1s rmportant enough to warrant asBlgnmg a special symbol to it, viz, 


Kr (read "kappa sub-r") 
For a 26-element alphabet, then, Kr= 0385 


(2) Now if one asks "Given a random assortment of 10 letters, what a.re the respective 


probabihties of occurrence of O, 1, 2, 
Blngle-letter comcidences?" one proceeds as follows 
As before, it lS first necessary to find the mean or eJ..pected number of comCidences and then 
refer to the vanous probability curves 
To fmd the mean, one reason9 as follows 
Given a 


sequence of 10 letters, one may begm with the 1st letter and compare it with the 2d, 3d, 
10th 
letter to see if any two letters comc1de, 9 such compansons may be me.de, or m other words there 
are, begmnmg with the 1st letter, 9 opportumties for the occurrence of a. comCidence 
But 
one may also start with the 2nd letter and compare it with the 3d, 4th 
10th letter, thus 


yieldmg 8 more opportumties for the occurrence of a comcidence, and so on 
Tlus process may 
contmue unttl one reaches the 9th letter and compares it with the 10th, y1eldmg but one oppor- 
tl1Illty for the occurrence m question 
The total number of compansons that can be made is 


therefore the sum of the senes of numbers 9, 8, 7, 
1, wlu.ch is 45 compansons a Smee m 
the 10 letters there a.re 45 opportumties for comcidence of '!mgle letters, and smce the probab1hty 


1 The expression itself may be termed a parameter, which m mathematics is often ui;,ed to designate a constant 
that charactenzes by each of its particular values some particular member of a system of values, functions, etc 
The word lB applicable m the case under dlscussior because the value obtained forKr is 0385, for a 25~lement 
alphabet, Kr= 0400, for a 27-element alphabet, Kr= 0370, etc 


8 The number of compansons may readily be found by the formula n(n2 l), where n is the total number 


of letters mvolved 
This formula is merely a special case under the general formula for ascertammg the number 


of combmations that may be made of n different tlungs taken r at a time wluch is Cr== 
111 
In the 
' 
" 
rl(n-r)I 


present case, smce only two letters arc compared at a time, r is al\\ays 2, and hence the expression 


711 
, 
rl (n-r)I 


h h 
h 
n(n-1) (n-2)1 
n(n-1) 
w ic is t e same as 
2(n-2), 
•becomes by cancellation of the term (n-2)1 reduced to --2- 
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for monograpluc cmnc1denee m random text HI 0385 the expected number of comc1dences is 
.0385X45=1 7325 
With m=l 7 one consults the vanous probability curves and an approXI- 
mate d1stnbution for exactly and for at least 0, 1, 2, 
comc1dences may readily be ascertamed 4 
e (1) Naw consid0'l the matter of monograph1c come1dence m Enghsh plam text 6 
Follow· 
mg the same reasonmg outlined m subpar d (1 ), the probability of comc1dence of two A's m plam 
text is the square of the probability of occurrence of the smgle letter A m such text 
The 
probab1hty of comc1dence of two B's is the square of the probab1hty of occurrence of the smgle 
letter B, and so on 
The sum of these squares for all the letters of the alpha bet, as shown in 


the following table, is found to be 066-7 


Lettf>r 
Frequency 1 m 
Probab1hty of 'K'P 
l!~e ot proba 
1,000 lettus 
arate 
0<.rurr~nce 
1llty of separate 
of the letter 
occunePCe 


A 
73 66 
0 0737 
0 0054 


B 
9 74 
0097 
0001 
c_ 
- 
30 68 
0307 
0009 


D 
42 44 
0424 
0018 
E 
- 
-- 
129 116 
1300 
0169 


F 
28 32 
0283 
0008 


G 
- 
16 38 
0164 
0003 


H 
33 88 
0839 
0012 


I 
73 52 
0735 
OOM 


J 
- - 
1 64 
0016 
0000 


K - - 
- 
- 
2 96 
003{) 
0000 


L 
36 42 
0364 
0013 
M 
24 74 
0247 
0006 


N 
79 50 
0795 
0063 
0 
75 28 
0753 
0057 


p 
26 70 
0267 
0007 


Q 
- 
3 50 
0035 
0000 


R 
- 
75 76 
0758 
0057 
s 
61 16 
0612 
0037 


T 
91 90 
0919 
0084 


u 
26 00 
0260 
0007 


v 
15 32 
0153 
0002 
w 
15 60 
0156 
0002 
x 
4 62 
0046 
0000 


y 
19 34 
0193 
0004 
z 
98 
0010 
0000 


Total 
1,000 00 
1 0000 
0667 


1 The de.ta given are taken from Table 3 AppPnd1~ 1 l\t1htary Cryptane.l)s1s Part I 


This then is the probab1hty that any two letters selected at random m a large volume of 
normal Eng.hsh telegraphic plam text will comc1de 
Smee this value rema.ms the same so long 
as the character of the language does not change rad1cally1 it may be sud that the probability 
of monographic coinculeru"e in Eriglish telegraphic plai"'L text is 0667, or Kp= 0667 


•The approximation given by the Poisson distribution m the case of smgle letters is not as good as that 
m the case of digraphs, trigraphs, etc , discmssed in Jl8ragraphs 3, 4, below 
5 The theory of monographic commdc.nce m pla.m text was origmally developed and applied by the author 
ma techmcal paper written m 1925 dealing with his solution of messages enciphered by a cryptograph known 
as the "Hebern Electric Super-Code" The paper was prmted m 1934 


i 
, 


~[ 
Ir 
' 
t~ 


I 


115 


(2) Given 10 letters of English ple.m text, wh.e.t is the probability that th.ere will be 0, 1, 
2, 
smgle~letter eomc1dences? Followmg the line of reasomng m subparagraph d (2), the 


expected number of comc1dences Is 0667X45=3 00, or m=3 
The distnbutJ.on for exe.ctly and 
for at least 0, 1, 2, 
comc1dences may readily be found by reference to the vanous probability 
curves 
(See footnote 4 ) 
J The fact that Kp (for English) is almost twice as great as Kr is of considerable tmportance 
m cryptane.lys1'3 
It will be dealt with m detru.l m a subsequent text 
At th1s pomt it will mere- 
ly be s&d that "P and "' for other languages .,md alphabets have been ealcula.ted and show oon- 
s1derable vanat1on, as will be noted m the table shown m paragraph 3d 
3 Data perta.uung to c4gra.ph.s.--a (1) The foregomg d1seus8lon has been 1estr1<'ted to 
questions concerning smgle l~tters, but by shght mod1ficat10n it can be a.ppb.ed to questions 
concermng d1g1e.phs, tngraph~, and longer polygraphs 
(2) In the precedmg cases it was necessary, before refemng to the vanous probability 


curves, to find the mean or expected number of oecurrences of the event m question Ill the 
total number of cases or tnals beJng consldered 
Given .a piece of random te:1..t totalling 100 
letters, for example, what is the mean (average, probable, expected) number of occurrences of 
digraphs m tlus te'Ct? Su1ce there are 67~ drlferent digraphs, the probalnhty of occurrence 
1 
of any specified digraph is 676 = 00148, smce m 100 letters there are 99 d1grnphs (1f the lette1s 


are tal\.en consecut1velv m pairs) the mean or average number of occurrences m this case is 
00148X99= 147 
Havmg the mean number of orcurrences of the event under cons1derat1on, 
one may now find the answers to these questions What l'! the probe.b1hty that any .,pec1fied 
digraph, say XY, will not occur? "-nat is the probab1hty that it wtll occur exactly 1, 2, 
3, 
times? At least 1, 2, 3, 
times? 


(3) Agam the probability curves may be used as before, for the type of distnbution is the 
same 
The followmg values are obtunable by reference to the vanous curves, ui.mg the mean 
value 00148X99= 147 


100 letur B of random te:i:t 


Probability that 
Probe.b1hty that 
Probable number Probabll! number 


Frequency a sric1fie4 dlgraph a siri:;1fted digtapb 
of digraphs a~ 
Of dJ.gl'&phs BP- 
(2") 
w I occur exactly " I occur at least 
pearmg exact y 
pearm4 at least 


:rtlmes 
:rt1mei. 
:rt1mes 
:r mes 


0 
0 86 
1 00 
581 36 
676 00 


l 
13 
14 
87 88 
94. 6, 


2 
01 
01 
6 76 
6 76 


3 
00 
00 
0 00 
0 00 


(4) Thus it, 1s seen that m 100 letters of random te:i..t the probability that a '!pecifled digraph 
will occur e~actly once, for example, 1s 13, at least once, 14, at least twice, 01 
The proba.b1hty 


that a spemfied d1gro.ph wtll occur at least 3 times IS negligible 
(By calculat1on, it is found to 
to be 0005) 


b (1) The probability of d1grapluc comcidence m random text based upon a 26-element 


alphabet is of course qmte simply obtamed smce there are 262 different digraphs, the probability 


1 
of selectmg any sper1fied digraph m random text ii. 26 
2 The probability of selectmg two iden- 


1 
1 
1 
troal digraphs m such text, when the digraphs are speci;fi£d, is 26iX26,=26, Smee there are 26i 


l 
1 
drlferent digraphs, the probab1hty of d1graph1c comc1dence m random text, K,:Z, Is 262X 20,= 262= 


00148 
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(2) Given a random assortment of 100 letters, what is the probability of occurrence of 


O, 1, 2, 
digraph1c commdences? Followmg the hne of reasomng m paragraph 2d (2), m 


100 letters the total number of compansons that may be made to see if two digraphs comcide 
is 4 851 
'l'lus number is obtamed as follows Consider the 1st and 2d letters m the senes of 
' 
100 letters, they may be combmed to from a digraph to be compared with the digraphs formed 
by combmmg the 2d and 3d, the 3d and 4th, the 4th and 5th letters, and so on, givmg a total of 
98 compansons 
Consider the digraph formed by combmmg the 2d and 3d letters, it may be 
compared with the digraphs formed by combmmg the 3d and 4th, 4th and 5th letters, and so on, 
givmg a total of 97 compansons 
This pxocess may be contmued down to the digraph formed 
by combmmg the 98th and 99th letters, which yields only one comparison, smce it may be 
compared only with the digraph resultmg from combmmg the 99th and lOOth letters 
The 


total number of compansons is the sum of the sequence of numbers 98, 97, 96, 95, 
1, wh1<'h 
IS 4,851 8 


(3) Smee m the 100 letters there are 4,851 opportumt1es for the occurrence of a digrapluc 


coIDcidence, and smce 1C,2= 00148, the expected number of coIDcidences is 00148X4851= 
7 17948=7 2 
The vanous probability curves may now be referred to and the followIDg results 


are obtamed 
, 


Diatnbut&on for 100 letters of random text 


Probability for exactly r Probability for at le11Bt :z: 
Frequency (s) 
dlgl'e.ph1c commden- 
d1graph1c colnc1dence• 


0 
0 001 
1 000 


1 
005 
999 
2 
019 
994 


3 
046 
975 


4 
083 
929 
5 
120 
846 
6 
144 
726 
7 
148 
582 
8 
134 
434 
9 
107 
300 
10 
077 
193 
11 
050 
116 


c In this table it will be noted that it is almost certam that m 100 letters of random text 
there will be at least one d1graphic coIDcidence, despite the fact that there are 676 possible 
digraphs and only 99 of them have appeared ID 100 letters 
When one thmks of a total of 676 


different digraphs from which the 99 digraphs may be selected it may appear rather mcred1ble 
that the chances are better than even ( 582) that one will find at least 7 d1graph1c comc1dences m 
100 letters of random text, yet that is what the statistical analysis of the probl<1m shows to be 
the C'ase 
These are, of course, purely accidental repetitions 
It is important that the student 
should fully reahze that more comc1dences or accidental repetitions than he feels mtmtively 
should occur m random text will actually occur m the cryptograms he will study He must 
therefore be on guard agamst puttmg too much rehance upon the surface appearances of the 
phenomena of repet1t1on, he must calculate what may be expected from pure chance, to make 
c;ure that the number and length of the repetitions he does see m a cryptogram are really better 
than what may be expected m random text 
In studymg cryptograms composed of figures thIS 


1 The formula for findmg the number of comparisons that can be made is as follows, where n=the total 


(n-t)(n-Hl) 
uumber of letters in the sequence anct t is the length of the polygraph Ng, of companaona• 
2 
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it veFy important, for as the number of dtfferent symbols decreases the probability for purely 
ehftllce comc1dences increases 
d. (1) For convemenee the followmg values of the reciprocals of various numbers from 20 to 
36, and of the reciprocals of the squares, cubes, and 4th powers of these numbers a.re hsted: 


7' 
l/s 
l/:t:I 
iJ:z:• 
i/zl 


20 
0 0500 
0 002500 
0 000125 
0 00000625 
21 
0476 
002266 
000108 
00000514 
22 
0455 
002070 
000094 
00000429 


23 
0435 
001892 
000082 
00000358 
24 
0417 
001739 
000073 
00000302 
25 
0400 
001600 
000064 
00000256 
26 
0385 
001482 
000057 
00000220 


27 
0370 
001369 
000051 
00000187 
28 
0357 
001274 
000046 
00000162 
29 
0845 
001190 
000041 
00000142 
30 
0833 
001109 
000037 
00000123 


31 
0323 
001043 
000034 
00000109 
32 
0813 
000980 
000031 
00000096 
33 
0803 
000918 
000028 
00000084 
34 
0294 
000864 
000025 
00000075 
35 
0286 
000818 
000023 
000000b7 


36 
0278 
000773 
000021 
00000060 


(2) The folloWlilg table gives the probabilities for monograpluc and digraphic comcidence 


for plam-text m several languages 


I anguare 


English _________ - ---- - _ -- -- - -- -- - 
French _________________________ _ 


Germa.11- __ --------- -- -- -- -- ---- - 
Itaha.n _________________________ _ 
Spanish _________________________ _ 


0 0667 
0778 
0762 
073$ 
0775 


0 0069 
0093 
0112 
0081 
0093 


4 Data pertauung to tngraphs, etc -a Enough has been shown to make clear to the student 
how to calculate probability data concemmg tngraphs, tetragraphs, and longer polygraphs 
b (1) For example, ID 100 letters of random text the value of m (the mean) for tr1graphs 


18 00005689X100= 005689 
With so small a value, the probability curves are hardly usable, 
bl,Jt at any rate they show that the probab1hty of occurrence of a specified tngraph in so small 
a volume of text is so small as to be practically negligible 
The probab1hty of a specified tngraph 


occurrmg twice m that text is an even smaller quantity 


(2) The calculation for findmg the probability of at least one tngraphic comcidence in 100 


letters of random text IS as follows 


m=( 
97 
;< 
98)(2~d)=4,753X 0000568912= 2704= 27 


Refemng to curvej0, with m= 27 the probability of findmg no tngraphic comc1dence is 76. 
The probab1hty of findmg at least one tngraphic comcidence is therefore 1- 76= 24 
c The calculat1on for a tetragraph1c comcidence is as follows 


m=(9 
6 ~ 
97)(2~.)=4,656X 0000021888= 0101- 01 


Referrmg to curvef0, \Hth m= 01 the proba.b1hty of .find.mg no tetrAiil'apluc (:9.lJlCideJ,We Ji 
so high as to amount almost to certamty 
Consequently, the probability of findmg at least 
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one tetragraplnc comc1dence is practically ml 
(It is calculated to be 0094 =approxtmately 01 
Tins means that m a hundred cases of 100-lctter random-text cryptograms, one might expect 
to find but one cryptogram m winch a 4.-letter repetition is brought about purely by chance, it 


lB, m common parlance, a "hundred to one shot") Consequently, if a tetragraplnc repetition 


lB found m a cryptogram of 100 letters, the probab1hty that it is an ace1dental repetition is 
extremely small If not accidental, then it must be causal, and the cause should be ascertamed 


5 An example -a The message of Pnr Oa of the text proper will be employed 
Fust, let 
the repetitions be sought and underlined, then the r('pPtit10ns are hsted for convemenre 


A 
B 
c 
D 


US YES 
E C P M ~ 
C C L N 
X B WC S 
US YEE 
XV EU E 
L E D E C 


S C R H T 
H X I P L 
A Y !L..Q__X 
0 F P J W 
M U S £..! 
J Y M S G 


Group 


BC 
ex 
EC 
LE 
JY 
PL 
SC 
SY 
us 
YE 
SYE 
USY 
USYE 


I B C I J 
J EM GP 
LL ET A 


Number of 
occurrences 


2 
2 
2 
3 
2 
2 
2 
2 
3 
2 
2 
2 
2 


0 X U V D 
GU RD P 
L E J Y Q 
G B M F I 


b Referrmg to the table m Par 3a (3) above, it will be seen that m 100 letters of random 
text one might expect to find about 7 digraphs appearing at least twice and no d1giaph appearmg 
3 tunes The hst of repetitions shows 8 digraphs occurring twice and 2 occurrmg 3 tunes 
c .Agam, the hst of repetitions sho\\s 10 digraphs each repeated at least t"W1ce, the table m 


Par 3b (3) above shows that m 100 letters of random text the probability of findmg at least 
that many digraplnc comc1dences lS only 193 
That is, the chances of this bemg an accident are 


but 176 m a thousand, or another way of expressmg the same thmg lS to say that the odds agamst 
this phenomenon bemg an accident are as 807 is to 193 or roughly 4 to 1 
d The probab1hty of findmg at least one tngrn.ph1c comcidence m 100 letters of random 
text is very small, as noted m Par 4b, the probability of findmg at least one tetragraplnc com- 
c1dence is still smaller (Par 4c) 
Yet this cipher message of hut 100 letters contams a repetition 


of thlS length 


e .A cons1derat1on of the foregomg leads to the conclus1on that the number n.nd length of the 


repetitions manifested by the cryptogram are not accidental, such as might be expected to occur 
m random text of the same length, hence they mm,t be causal m their ongm The cause m tlus 
case lS not difficult to find repeated isolated letters and repeated sequences of letters (digraphs, 
tngraphs) m the plam te""tt were actually enciphered by 1dent1cal alphabets, resultmg m producmg 
repeated letters and sequences Jn the cipher text 
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